last executing test programs: 3.690351574s ago: executing program 2 (id=5242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.37203663s ago: executing program 2 (id=5244): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.223550691s ago: executing program 3 (id=5246): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB="3c000000400007012bbd7000fedbdf25037c00000400c280180009801400ff80100046800c00008008000800", @ANYRES32=0x0, @ANYBLOB="040008"], 0x3c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 2.90967407s ago: executing program 3 (id=5250): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_LOCAL={0x8, 0x6, @remote}]}}}]}, 0x4c}}, 0x40004) 2.590853391s ago: executing program 2 (id=5255): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lgetxattr(0x0, &(0x7f0000000080)=@known='trusted.overlay.opaque\x00', 0x0, 0x0) 2.572854577s ago: executing program 3 (id=5256): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.423074049s ago: executing program 5 (id=5258): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0xffffffffffffffff, &(0x7f0000000000)) 2.40272154s ago: executing program 2 (id=5259): r0 = socket(0xa, 0x1, 0x0) getsockopt(r0, 0x1, 0x47, &(0x7f0000001940)=""/10, &(0x7f0000000040)=0x8) 2.271760733s ago: executing program 2 (id=5262): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@err_ro}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f000001fb40)={0x3, 0x54c, 0x6, 0x0, 0x12c8, 0x100000000000f9, 0x4, 0x5, 0xfffffffe}) 2.133106294s ago: executing program 4 (id=5264): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db1af87ff1000000bfa100000000000007010000f8ffffffb702000008000000b703001d0000000085000000ca00000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) 1.900410604s ago: executing program 4 (id=5267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 1.664407407s ago: executing program 0 (id=5270): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.644969913s ago: executing program 4 (id=5271): r0 = epoll_create(0xff9) poll(&(0x7f00000000c0)=[{r0, 0x8400}], 0x1, 0x1) 1.411269116s ago: executing program 4 (id=5272): r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 1.348206273s ago: executing program 0 (id=5273): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) getpgrp(0x0) 1.326879658s ago: executing program 1 (id=5274): r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x300) 1.314146207s ago: executing program 5 (id=5275): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x8202) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x20000000255) 1.11878637s ago: executing program 0 (id=5276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x6c}}, 0x20050800) 1.117255091s ago: executing program 4 (id=5277): pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 1.032745863s ago: executing program 5 (id=5278): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000000c0)={0x2, {0xd, 0x28f, 0x1, 0x7}}) 1.032286223s ago: executing program 1 (id=5279): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000040)={0x17, 0x1, 0x0, "df7c0cc512ac4900000000000000002200", 0x50323234}) 948.915437ms ago: executing program 0 (id=5280): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @u32=0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 893.693831ms ago: executing program 0 (id=5281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) 836.844499ms ago: executing program 0 (id=5282): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000180)='.\x02\x00', 0x1200880, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x445f, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1819011, 0x0, 0x43, 0x0, &(0x7f00000001c0)) 770.999726ms ago: executing program 4 (id=5283): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1c802, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x5f5b, &(0x7f0000003100)="$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") removexattr(&(0x7f0000000180)='.\x00', &(0x7f0000000540)=@random={'os2.', 'system.posix_acl_access\x00'}) 766.148232ms ago: executing program 5 (id=5284): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000010000b0026bd70200040000003000200080002000700339d060001"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x240400c4) 748.218116ms ago: executing program 1 (id=5285): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'veth1_to_hsr\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x29, 0xd, 0x7, {0x7, @ah_ip6_spec={@private2, @empty, 0xff, 0xea}, {0x0, @multicast, 0x5, 0xfff4, [0xc8, 0x4]}, @tcp_ip6_spec={@ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x6e20, 0x4e21, 0x9}, {0x0, @random="e2dcc9f600", 0x9, 0x1, [0xfe, 0x1]}, 0x2, 0x5}}}) 637.865865ms ago: executing program 3 (id=5286): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) getgroups(0x0, 0x0) 511.408784ms ago: executing program 1 (id=5287): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 450.566445ms ago: executing program 2 (id=5288): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x118, 0x29, 0x1, 0x0, 0x25dfdbf8, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x100}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8", @typed={0x9, 0x145, 0x0, 0x0, @str='-%*$\x00'}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x11}, 0x0) 442.597612ms ago: executing program 3 (id=5289): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x2b, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 359.260231ms ago: executing program 5 (id=5290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="580000000102010100010000000000000a00000006000740000000003c0001802c0001801a000300fe8000000000000000000000000000aa14000400fc00000000000000000000000c000280070001"], 0x58}}, 0x0) 223.931117ms ago: executing program 1 (id=5291): r0 = socket(0x28, 0x5, 0x0) listen(r0, 0x4) 205.083398ms ago: executing program 3 (id=5292): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x2}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 77.140771ms ago: executing program 5 (id=5293): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) 0s ago: executing program 1 (id=5294): prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) mq_open(&(0x7f0000000400)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x850\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xa4\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96n\x17|\xc9xR\\0\xd5\x8c=J\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd3\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xa7\x14t\x9feN\x93\x89\x9f\xbfX*\xec\x00\x00\x00\x00', 0x40, 0x44, 0x0) kernel console output (not intermixed with test programs): tooth: hci2: unexpected cc 0x1009 length: 9 > 7 [ 503.935979][ T5983] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 504.024649][ T802] usb 6-1: Using ep0 maxpacket: 16 [ 504.034641][ T802] usb 6-1: unable to get BOS descriptor or descriptor too short [ 504.045533][ T802] usb 6-1: config 4 has an invalid interface number: 86 but max is 0 [ 504.065538][ T802] usb 6-1: config 4 has no interface number 0 [ 504.071738][ T802] usb 6-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 504.093397][ T802] usb 6-1: config 4 interface 86 has no altsetting 0 [ 504.106241][ T802] usb 6-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 504.124972][ T802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.143211][ T9] videodev: could not get a free minor [ 504.151782][ T802] usb 6-1: Product: syz [ 504.159588][ T9] dsbr100 4-1:9.245: couldn't register video device [ 504.169582][ T802] usb 6-1: Manufacturer: syz [ 504.178723][ T802] usb 6-1: SerialNumber: syz [ 504.185247][ T9] dsbr100 4-1:9.245: probe with driver dsbr100 failed with error -23 [ 504.215417][ T9] usb 4-1: USB disconnect, device number 93 [ 504.435620][ T802] cypress_m8 6-1:4.86: DeLorme Earthmate USB converter detected [ 504.477053][ T802] usb 6-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 504.531986][ T802] usb 6-1: USB disconnect, device number 95 [ 504.637754][ T802] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 504.673227][ T802] cypress_m8 6-1:4.86: device disconnected [ 504.678436][T14808] loop0: detected capacity change from 0 to 65 [ 504.748945][T14808] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0 [ 505.020588][ T24] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 505.200495][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 505.222451][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 505.268084][ T24] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 505.312863][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.355318][ T24] usb 3-1: Product: syz [ 505.371349][ T24] usb 3-1: Manufacturer: syz [ 505.386715][ T24] usb 3-1: SerialNumber: syz [ 505.408347][ T24] usb 3-1: config 0 descriptor?? [ 505.448088][ T24] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 505.683586][ T12] usb 3-1: Failed to submit usb control message: -71 [ 505.684051][ T24] usb 3-1: USB disconnect, device number 94 [ 505.715704][ T12] usb 3-1: unable to send the bmi data to the device: -71 [ 505.742798][ T12] usb 3-1: unable to get target info from device [ 505.767089][ T12] usb 3-1: could not get target info (-71) [ 505.792543][ T12] usb 3-1: could not probe fw (-71) [ 505.975720][T14813] loop1: detected capacity change from 0 to 40427 [ 505.982958][T14818] loop0: detected capacity change from 0 to 32768 [ 506.000846][T14813] F2FS-fs (loop1): build fault injection rate: 684 [ 506.007555][T14818] BTRFS: device fsid 59b5568a-a427-4554-b73a-27dcd238cc5a devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3937 (14818) [ 506.028284][T14828] loop4: detected capacity change from 0 to 32768 [ 506.033956][T14813] F2FS-fs (loop1): build fault injection type: 0x0 [ 506.037380][T14816] loop3: detected capacity change from 0 to 32768 [ 506.067015][T14813] F2FS-fs (loop1): invalid crc value [ 506.067526][T14828] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3941 (14828) [ 506.088094][T14818] BTRFS info (device loop0): first mount of filesystem 59b5568a-a427-4554-b73a-27dcd238cc5a [ 506.122949][T14816] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3936 (14816) [ 506.130993][T14818] BTRFS info (device loop0): using crc32c checksum algorithm [ 506.178151][T14816] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 506.207932][T14828] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 506.223791][T14816] BTRFS info (device loop3): using sha256 checksum algorithm [ 506.261884][T14828] BTRFS info (device loop4): using sha256 checksum algorithm [ 506.366691][T14826] loop5: detected capacity change from 0 to 32768 [ 506.410731][T14818] BTRFS info (device loop0): enabling ssd optimizations [ 506.441243][T14818] BTRFS info (device loop0): turning on async discard [ 506.445994][T14826] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3940 (14826) [ 506.448133][T14818] BTRFS info (device loop0): enabling free space tree [ 506.511849][T14826] BTRFS info (device loop5): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 506.580268][T14826] BTRFS info (device loop5): using xxhash64 checksum algorithm [ 506.585037][T14813] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 506.641231][ T5982] BTRFS info (device loop0): last unmount of filesystem 59b5568a-a427-4554-b73a-27dcd238cc5a [ 506.661051][T14883] loop2: detected capacity change from 0 to 256 [ 506.675116][T14828] BTRFS info (device loop4): enabling ssd optimizations [ 506.676551][T14816] BTRFS info (device loop3): enabling ssd optimizations [ 506.697864][T14813] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 506.707667][T14883] exfat: Deprecated parameter 'utf8' [ 506.722047][T14816] BTRFS info (device loop3): turning on async discard [ 506.722065][T14828] BTRFS info (device loop4): turning on async discard [ 506.739296][T14816] BTRFS info (device loop3): enabling free space tree [ 506.755141][T14883] exFAT-fs (loop2): failed to read boot sector [ 506.791394][T14828] BTRFS info (device loop4): enabling free space tree [ 506.806068][T14883] exFAT-fs (loop2): failed to recognize exfat type [ 506.881146][T14826] BTRFS info (device loop5): enabling ssd optimizations [ 506.953445][T14826] BTRFS info (device loop5): turning on async discard [ 506.989706][T14826] BTRFS info (device loop5): enabling free space tree [ 507.051751][ T5992] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 507.129965][ T5990] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 507.158298][T14902] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 507.262692][ T5994] BTRFS info (device loop5): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 507.496242][T14906] loop2: detected capacity change from 0 to 16 [ 507.520699][T14906] erofs (device loop2): mounted with root inode @ nid 36. [ 507.722775][ T802] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 507.752357][ T30] audit: type=1326 audit(1777315383.586:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14911 comm="syz.3.3945" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa58f99c819 code=0x0 [ 507.935101][ T802] usb 1-1: Using ep0 maxpacket: 16 [ 507.976367][ T802] usb 1-1: unable to get BOS descriptor or descriptor too short [ 508.021518][ T802] usb 1-1: config 1 has an invalid interface number: 93 but max is 0 [ 508.024810][T14919] loop2: detected capacity change from 0 to 16 [ 508.062830][ T802] usb 1-1: config 1 has no interface number 0 [ 508.101412][ T802] usb 1-1: config 1 interface 93 has no altsetting 0 [ 508.132174][T14919] erofs (device loop2): mounted with root inode @ nid 36. [ 508.159392][ T802] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0203, bcdDevice=56.2a [ 508.192806][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.210000][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.230599][ T802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.240607][T14921] loop3: detected capacity change from 0 to 512 [ 508.266879][ T5983] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 508.279892][ T5983] Bluetooth: hci2: Injecting HCI hardware error event [ 508.288363][ T50] Bluetooth: hci2: hardware error 0x00 [ 508.305871][ T802] usb 1-1: Product: syz [ 508.320335][ T802] usb 1-1: Manufacturer: syz [ 508.329066][ T802] usb 1-1: SerialNumber: syz [ 508.430123][T14921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.599097][T14929] loop5: detected capacity change from 0 to 512 [ 508.613636][ T9] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 508.629856][ T802] option 1-1:1.93: GSM modem (1-port) converter detected [ 508.659953][ T5992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.756978][T14929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.757151][T14931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.800769][T14935] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 508.815399][ T9] usb 5-1: config 0 has an invalid interface number: 84 but max is 0 [ 508.871336][ T9] usb 5-1: config 0 has no interface number 0 [ 508.896162][ T802] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 508.926574][ T9] usb 5-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64 [ 508.934788][ T5986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.946931][ T9] usb 5-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 508.977189][ T5994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.999715][ T9] usb 5-1: config 0 interface 84 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 509.057282][ T802] usb 1-1: USB disconnect, device number 93 [ 509.080279][ T9] usb 5-1: config 0 interface 84 has no altsetting 0 [ 509.097299][ T9] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 509.109190][ T802] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 509.130968][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.161467][ T802] option 1-1:1.93: device disconnected [ 509.203122][ T9] usb 5-1: config 0 descriptor?? [ 509.232909][T14926] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 509.284219][ T9] option 5-1:0.84: GSM modem (1-port) converter detected [ 509.393645][T14945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.511427][T14944] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 509.542398][ T5981] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.559542][ T24] usb 5-1: USB disconnect, device number 88 [ 509.633829][ T24] option 5-1:0.84: device disconnected [ 509.718950][T14950] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 509.752222][T14950] ntfs3(loop2): ino=0, mi_enum_attr [ 509.767157][T14950] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 509.840535][T14950] ntfs3(loop2): failed to replay log file. Can't mount rw! [ 510.367913][T14939] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3959 (14939) [ 510.450453][T14939] BTRFS info (device loop3): first mount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 510.502412][T14939] BTRFS info (device loop3): using crc32c checksum algorithm [ 510.575581][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 510.646121][T14939] BTRFS info (device loop3): enabling ssd optimizations [ 510.663864][T14939] BTRFS info (device loop3): turning on async discard [ 510.684356][T14939] BTRFS info (device loop3): enabling free space tree [ 510.887238][ T5992] BTRFS info (device loop3): last unmount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 511.195115][T14954] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3966 (14954) [ 511.291858][T14954] BTRFS info (device loop0): first mount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc [ 511.335822][T14954] BTRFS info (device loop0): using blake2b checksum algorithm [ 511.413292][T14982] set_capacity_and_notify: 9 callbacks suppressed [ 511.413316][T14982] loop2: detected capacity change from 0 to 32768 [ 511.470428][T14982] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3973 (14982) [ 511.569000][T14997] loop3: detected capacity change from 0 to 512 [ 511.597057][T14982] BTRFS info (device loop2): first mount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 511.679453][T14954] BTRFS info (device loop0): enabling ssd optimizations [ 511.685179][T14982] BTRFS info (device loop2): using xxhash64 checksum algorithm [ 511.696102][T14962] loop1: detected capacity change from 0 to 32768 [ 511.721617][T14954] BTRFS info (device loop0): turning on async discard [ 511.756480][T14954] BTRFS info (device loop0): enabling free space tree [ 511.757617][T14997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.781670][T14962] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 511.837110][T14997] ext4 filesystem being mounted at /652/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.850747][T14962] dlm: no local IP address has been set [ 511.889287][T14962] dlm: cannot start dlm midcomms -107 [ 511.911575][T14962] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 511.979614][T14982] BTRFS info (device loop2): enabling ssd optimizations [ 511.999167][T14982] BTRFS info (device loop2): turning on async discard [ 512.007667][T14982] BTRFS info (device loop2): enabling free space tree [ 512.093785][ T5982] BTRFS info (device loop0): last unmount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc [ 512.223779][ T5992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.236993][T14956] loop5: detected capacity change from 0 to 32768 [ 512.277401][T14965] loop4: detected capacity change from 0 to 32768 [ 512.299898][T14956] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 512.348827][T14965] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 512.363262][T14956] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 512.385192][T14965] CPU: 1 UID: 0 PID: 14965 Comm: syz.4.3971 Not tainted syzkaller #0 PREEMPT(full) [ 512.385224][T14965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 512.385240][T14965] Call Trace: [ 512.385251][T14965] [ 512.385261][T14965] dump_stack_lvl+0xe8/0x150 [ 512.385309][T14965] sysfs_create_dir_ns+0x271/0x2a0 [ 512.385345][T14965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.385380][T14965] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 512.385410][T14965] ? do_raw_spin_unlock+0xf5/0x210 [ 512.385452][T14965] kobject_add_internal+0x62b/0xd00 [ 512.385500][T14965] kobject_init_and_add+0x12b/0x1a0 [ 512.385544][T14965] ? __pfx_kobject_init_and_add+0x10/0x10 [ 512.385581][T14965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.385612][T14965] ? __raw_spin_lock_init+0x45/0x100 [ 512.385648][T14965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.385679][T14965] ? __init_swait_queue_head+0xa9/0x150 [ 512.385717][T14965] gfs2_sys_fs_add+0x257/0x480 [ 512.385757][T14965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.385788][T14965] ? is_dynamic_key+0x1ac/0x1c0 [ 512.385831][T14965] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 512.385882][T14965] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 512.385931][T14965] gfs2_fill_super+0x13a7/0x21d0 [ 512.385983][T14965] ? __pfx_gfs2_fill_super+0x10/0x10 [ 512.386014][T14965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.386051][T14965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.386081][T14965] ? sb_set_blocksize+0x155/0x240 [ 512.386113][T14965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.386144][T14965] ? setup_bdev_super+0x4c1/0x5b0 [ 512.386184][T14965] get_tree_bdev_flags+0x431/0x4f0 [ 512.386220][T14965] ? __pfx_gfs2_fill_super+0x10/0x10 [ 512.386252][T14965] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 512.386285][T14965] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 512.386327][T14965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.386366][T14965] gfs2_get_tree+0x51/0x1e0 [ 512.386403][T14965] vfs_get_tree+0x92/0x2a0 [ 512.386441][T14965] do_new_mount+0x341/0xd30 [ 512.386465][T14965] ? apparmor_capable+0x126/0x170 [ 512.386505][T14965] ? __pfx_do_new_mount+0x10/0x10 [ 512.386534][T14965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.386565][T14965] ? ns_capable+0x89/0xe0 [ 512.386605][T14965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.386639][T14965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.386676][T14965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.386707][T14965] ? user_path_at+0xd4/0x160 [ 512.386740][T14965] __se_sys_mount+0x31d/0x420 [ 512.386774][T14965] ? __pfx___se_sys_mount+0x10/0x10 [ 512.386798][T14965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.386838][T14965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.386869][T14965] ? __x64_sys_mount+0x20/0xc0 [ 512.386895][T14965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.386924][T14965] do_syscall_64+0x15f/0xf80 [ 512.386955][T14965] ? trace_irq_disable+0x3b/0x140 [ 512.386998][T14965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.387025][T14965] RIP: 0033:0x7ff3c699da8a [ 512.387048][T14965] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.387070][T14965] RSP: 002b:00007ff3c77bfe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 512.387096][T14965] RAX: ffffffffffffffda RBX: 00007ff3c77bfee0 RCX: 00007ff3c699da8a [ 512.387115][T14965] RDX: 0000200000013400 RSI: 0000200000013440 RDI: 00007ff3c77bfea0 [ 512.387135][T14965] RBP: 0000200000013400 R08: 00007ff3c77bfee0 R09: 0000000000000000 [ 512.387154][T14965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000013440 [ 512.387171][T14965] R13: 00007ff3c77bfea0 R14: 00000000000133e0 R15: 0000200000013480 [ 512.387210][T14965] [ 512.785294][T14965] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 512.799583][T14965] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 512.966615][T14956] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 512.984790][ T6051] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 512.991746][ T6051] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 513.125459][ T5986] BTRFS info (device loop2): last unmount of filesystem 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 [ 513.240584][T15031] loop0: detected capacity change from 0 to 1024 [ 513.374755][T15031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.489698][T15035] loop3: detected capacity change from 0 to 1764 [ 513.730521][ T5982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.933276][ T6051] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 880ms [ 513.984076][ T6051] gfs2: fsid=syz:syz.0: jid=0: Done [ 514.007568][T14956] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 514.026839][T15045] loop4: detected capacity change from 0 to 256 [ 514.031958][T14956] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 514.053235][T15048] loop3: detected capacity change from 0 to 64 [ 514.067740][T15050] loop0: detected capacity change from 0 to 64 [ 515.137319][T15029] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 515.325834][T15029] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 515.381967][T15043] (syz.2.3983,15043,1):ocfs2_sb_probe:759 ERROR: incompatible version: 2.33686018 [ 515.382223][T15058] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3988 (15058) [ 515.439140][T15029] XFS (loop1): Starting recovery (logdev: internal) [ 515.444556][T15043] (syz.2.3983,15043,1):ocfs2_sb_probe:772 ERROR: This is an ocfs v1 filesystem which must be upgraded before mounting with ocfs v2 [ 515.474514][T15058] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 515.520511][T15043] (syz.2.3983,15043,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 515.534476][T15029] XFS (loop1): Ending recovery (logdev: internal) [ 515.545389][T15058] BTRFS info (device loop5): using sha256 checksum algorithm [ 515.554768][T15043] (syz.2.3983,15043,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 515.581573][T15029] XFS (loop1): Quotacheck needed: Please wait. [ 515.755320][T15058] BTRFS info (device loop5): enabling ssd optimizations [ 515.791741][T15058] BTRFS info (device loop5): turning on async discard [ 515.807834][T15058] BTRFS info (device loop5): enabling free space tree [ 515.855807][T15029] XFS (loop1): Quotacheck: Done. [ 515.958228][T15054] BTRFS: device fsid ed4422de-dbc1-4dc1-8d60-3583f36c24cc devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3987 (15054) [ 516.047997][T15056] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3989 (15056) [ 516.075177][T15054] BTRFS info (device loop3): first mount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc [ 516.132509][T15054] BTRFS info (device loop3): using crc32c checksum algorithm [ 516.159581][ T5981] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 516.172277][T15056] BTRFS info (device loop0): first mount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 516.201616][ T5994] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 516.229753][T15056] BTRFS info (device loop0): using blake2b checksum algorithm [ 516.516551][T15054] BTRFS info (device loop3): enabling ssd optimizations [ 516.542130][T15056] BTRFS info (device loop0): enabling ssd optimizations [ 516.550909][T15054] BTRFS info (device loop3): turning on async discard [ 516.588477][T15054] BTRFS info (device loop3): enabling free space tree [ 516.607239][T15056] BTRFS info (device loop0): turning on async discard [ 516.679038][T15056] BTRFS info (device loop0): enabling free space tree [ 516.718163][T15095] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 516.781654][T15095] ntfs3(loop2): ino=3, mi_enum_attr [ 516.818318][T15095] ntfs3(loop2): Failed to load $Volume (-22). [ 516.941025][ T5982] BTRFS info (device loop0): last unmount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 516.954977][ T5992] BTRFS info (device loop3): last unmount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc [ 517.207346][T15120] set_capacity_and_notify: 7 callbacks suppressed [ 517.207368][T15120] loop2: detected capacity change from 0 to 256 [ 517.308868][T15123] loop5: detected capacity change from 0 to 512 [ 517.368000][T15123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.432259][T15126] loop3: detected capacity change from 0 to 256 [ 517.481188][T15123] ext4 filesystem being mounted at /651/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.544011][T15130] loop0: detected capacity change from 0 to 128 [ 517.763851][ T5994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.958912][T15134] loop3: detected capacity change from 0 to 1024 [ 517.991989][T15132] loop2: detected capacity change from 0 to 2048 [ 518.026702][T15138] loop5: detected capacity change from 0 to 512 [ 518.070709][T15136] loop0: detected capacity change from 0 to 2048 [ 518.083242][T15134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.107905][T15132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.122555][T15132] ext4 filesystem being mounted at /616/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.238496][T15143] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 518.371871][ T5992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.416258][ T5986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.864154][T15147] loop5: detected capacity change from 0 to 4096 [ 518.903479][T15147] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 518.918328][T15151] loop3: detected capacity change from 0 to 4096 [ 518.954631][T15151] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 519.150230][T15150] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 520.862924][T15157] (syz.3.4008,15157,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 520.941258][T15157] (syz.3.4008,15157,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 521.167741][T15159] XFS (loop2): no-recovery mounts must be read-only. [ 521.384091][T15161] (syz.4.4010,15161,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 521.456238][T15161] (syz.4.4010,15161,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 521.904091][T15172] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 522.604899][T15166] set_capacity_and_notify: 6 callbacks suppressed [ 522.604923][T15166] loop3: detected capacity change from 0 to 32768 [ 522.683790][T15166] (syz.3.4012,15166,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 522.793332][T15166] (syz.3.4012,15166,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 522.879220][T15169] loop2: detected capacity change from 0 to 32768 [ 522.951249][T15169] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4013 (15169) [ 523.020433][T15169] BTRFS info (device loop2): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 523.064688][T15169] BTRFS info (device loop2): using blake2b checksum algorithm [ 523.183091][T15169] BTRFS info (device loop2): enabling ssd optimizations [ 523.191782][T15171] loop4: detected capacity change from 0 to 32768 [ 523.259379][T15171] (syz.4.4014,15171,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 523.275763][T15169] BTRFS info (device loop2): turning on async discard [ 523.332688][T15169] BTRFS info (device loop2): enabling free space tree [ 523.345997][T15174] loop5: detected capacity change from 0 to 32768 [ 523.372939][T15171] (syz.4.4014,15171,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 523.438106][T15174] (syz.5.4015,15174,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 523.506547][T15174] (syz.5.4015,15174,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 523.610963][ T5986] BTRFS info (device loop2): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 523.941115][T15200] SQUASHFS error: Failed to read block 0x0: -5 [ 523.983727][T15200] unable to read squashfs_super_block [ 524.307649][T15204] loop5: detected capacity change from 0 to 3 [ 524.336717][T15204] syz.5.4021: attempt to access beyond end of device [ 524.336717][T15204] loop5: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 524.409532][T15204] SQUASHFS error: Failed to read block 0x0: -5 [ 524.450082][T15204] unable to read squashfs_super_block [ 524.752865][T15206] loop5: detected capacity change from 0 to 8 [ 524.981320][T15208] loop1: detected capacity change from 0 to 256 [ 525.022559][T15208] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 525.059092][T15208] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 525.082984][T15208] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 525.110022][T15208] UDF-fs: Scanning with blocksize 512 failed [ 525.145747][T15208] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 525.180690][T15208] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 525.330762][ T6051] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 525.435954][T15212] loop1: detected capacity change from 0 to 256 [ 525.447968][T15177] loop0: detected capacity change from 0 to 65536 [ 525.449314][T15212] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 525.495683][T15212] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 525.516714][T15212] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 525.531459][T15212] UDF-fs: Scanning with blocksize 512 failed [ 525.531587][T15177] (syz.0.4016,15177,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 525.550510][T15212] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 525.566255][ T6051] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 525.577594][ T6051] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.588423][T15212] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 525.597650][ T6051] usb 6-1: Product: syz [ 525.602105][T15177] (syz.0.4016,15177,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 525.614433][ T6051] usb 6-1: Manufacturer: syz [ 525.632927][ T6051] usb 6-1: SerialNumber: syz [ 525.838721][T15193] loop3: detected capacity change from 0 to 65536 [ 525.900653][T15193] (syz.3.4017,15193,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 525.902560][ T6051] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 525.959304][T15193] (syz.3.4017,15193,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 526.045913][T15217] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 526.047552][T15218] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 526.141454][T15217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 526.164373][T15218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 526.231190][ T6051] usb 6-1: USB disconnect, device number 96 [ 526.539347][T15202] (syz.2.4018,15202,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 526.604651][T15202] (syz.2.4018,15202,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 526.715989][T15226] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 527.044294][T15228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.069301][T15235] ufs: You didn't specify the type of your ufs filesystem [ 527.069301][T15235] [ 527.069301][T15235] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 527.069301][T15235] [ 527.069301][T15235] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 527.102084][T15235] ufs: ufstype=old is supported read-only [ 527.115015][T15235] ufs: ufs_fill_super(): bad magic number [ 527.358201][ T5994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.147240][T15249] set_capacity_and_notify: 13 callbacks suppressed [ 528.147263][T15249] loop5: detected capacity change from 0 to 512 [ 528.705243][T15234] loop0: detected capacity change from 0 to 32768 [ 528.780189][T15234] (syz.0.4032,15234,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 528.836310][T15234] (syz.0.4032,15234,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 529.783196][T15257] loop5: detected capacity change from 0 to 32768 [ 529.832564][T15257] XFS (loop5): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 529.847176][T15257] XFS (loop5): Log size 624 blocks too small, minimum size is 816 blocks [ 529.881045][T15257] XFS (loop5): AAIEEE! Log failed size checks. Abort! [ 529.898256][T15257] XFS (loop5): log mount failed [ 531.364762][T15260] loop0: detected capacity change from 0 to 65536 [ 531.380958][T15271] loop5: detected capacity change from 0 to 32768 [ 531.475936][T15260] XFS (loop0): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 531.498348][T15271] XFS (loop5): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 531.544804][T15271] XFS (loop5): Log size 516 blocks too small, minimum size is 636 blocks [ 531.572877][T15271] XFS (loop5): AAIEEE! Log failed size checks. Abort! [ 531.611552][T15271] XFS (loop5): log mount failed [ 531.782446][T15260] XFS (loop0): Ending clean mount [ 531.892687][T15269] loop3: detected capacity change from 0 to 65536 [ 531.971989][ T5982] XFS (loop0): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 531.987102][T15269] XFS (loop3): Mounting V5 Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd [ 532.119073][T15269] XFS (loop3): Ending clean mount [ 532.332475][ T5992] XFS (loop3): Unmounting Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd [ 533.418252][T15308] loop2: detected capacity change from 0 to 4096 [ 533.457069][T15308] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 533.876675][T15312] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 533.879617][T15293] loop5: detected capacity change from 0 to 65536 [ 534.014875][T15293] XFS (loop5): Deprecated V4 format (crc=0) not supported by kernel. [ 535.230685][T15310] loop0: detected capacity change from 0 to 65536 [ 535.294251][T15310] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 535.358532][T15334] loop5: detected capacity change from 0 to 128 [ 535.676077][T15321] loop2: detected capacity change from 0 to 32768 [ 535.869668][T15338] loop5: detected capacity change from 0 to 2048 [ 535.987385][T15338] loop5: p1 p2 p3 [ 536.684833][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 536.696564][ T6403] udevd[6403]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 536.723774][ T6865] udevd[6865]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 536.973045][T15355] netlink: 'syz.5.4072': attribute type 46 has an invalid length. [ 537.345081][T15342] loop2: detected capacity change from 0 to 32768 [ 537.387128][T15342] BTRFS: device fsid 18898830-c59e-4026-919d-fe1055706c2c devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4066 (15342) [ 537.442555][T15342] BTRFS info (device loop2): first mount of filesystem 18898830-c59e-4026-919d-fe1055706c2c [ 537.486759][T15342] BTRFS info (device loop2): using xxhash64 checksum algorithm [ 537.613264][T15342] BTRFS info (device loop2): enabling ssd optimizations [ 537.672979][T15342] BTRFS info (device loop2): turning on async discard [ 537.679917][T15342] BTRFS info (device loop2): enabling free space tree [ 537.725788][T15391] netlink: 'syz.5.4083': attribute type 10 has an invalid length. [ 537.780143][T15391] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4083'. [ 537.840291][T15391] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 537.859004][T15395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4086'. [ 537.877169][T15391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.925190][ T5986] BTRFS info (device loop2): last unmount of filesystem 18898830-c59e-4026-919d-fe1055706c2c [ 538.100277][ T24] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 538.185246][ T30] audit: type=1326 audit(1777315412.054:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15402 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b6f9c819 code=0x7ffc0000 [ 538.241829][T15405] Illegal XDP return value 4294967282 on prog (id 273) dev N/A, expect packet loss! [ 538.288775][ T30] audit: type=1326 audit(1777315412.054:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15402 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b6f9c819 code=0x7ffc0000 [ 538.312822][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 538.384467][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 538.401591][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.412222][ T30] audit: type=1326 audit(1777315412.101:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15402 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f06b6f9c819 code=0x7ffc0000 [ 538.443791][ T24] usb 5-1: Product: syz [ 538.455039][ T24] usb 5-1: Manufacturer: syz [ 538.487638][ T24] usb 5-1: SerialNumber: syz [ 538.521807][ T30] audit: type=1326 audit(1777315412.101:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15402 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b6f9c819 code=0x7ffc0000 [ 538.522203][T15415] syz.2.4095 uses obsolete (PF_INET,SOCK_PACKET) [ 538.579055][ T24] usb 5-1: config 0 descriptor?? [ 538.612950][ T24] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22 [ 538.633037][ T30] audit: type=1326 audit(1777315412.101:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15402 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b6f9c819 code=0x7ffc0000 [ 538.851533][ T24] usb 5-1: USB disconnect, device number 89 [ 538.986736][T15431] loop2: detected capacity change from 0 to 8 [ 539.046831][T15436] loop0: detected capacity change from 0 to 512 [ 539.113241][T15436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.227571][T15445] ip6t_srh: unknown srh match flags 5802 [ 539.245345][T15447] netlink: 'syz.3.4109': attribute type 11 has an invalid length. [ 539.408545][ T5982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.548038][T15453] ieee802154 phy0 wpan0: encryption failed: -22 [ 540.220891][T15483] loop1: detected capacity change from 0 to 64 [ 540.631876][T15504] loop4: detected capacity change from 0 to 16 [ 540.669615][T15504] erofs (device loop4): mounted with root inode @ nid 36. [ 540.730352][ T30] audit: type=1800 audit(1777315414.449:22): pid=15504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4136" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 541.055647][ T2358] pvrusb2: request_firmware fatal error with code=-110 [ 541.073481][ T30] audit: type=1326 audit(1777315414.767:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15519 comm="syz.0.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b6f9c819 code=0x7ffc0000 [ 541.126339][ T2358] pvrusb2: Failure uploading firmware1 [ 541.165160][ T2358] pvrusb2: Device initialization was not successful. [ 541.198064][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 541.215578][ T30] audit: type=1326 audit(1777315414.767:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15519 comm="syz.0.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b6f9c819 code=0x7ffc0000 [ 541.279568][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 541.314185][T15528] loop4: detected capacity change from 0 to 1024 [ 541.336475][ T2358] pvrusb2: Failed to submit write-control URB status=-19 [ 541.344242][ T801] pvrusb2: Device being rendered inoperable [ 541.346862][ T30] audit: type=1326 audit(1777315414.795:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15519 comm="syz.0.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b6f9c819 code=0x7ffc0000 [ 541.366029][ T2358] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 541.391025][T15528] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 541.411133][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4150'. [ 541.457455][ T2358] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 541.460480][ T30] audit: type=1326 audit(1777315414.795:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15519 comm="syz.0.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b6f9c819 code=0x7ffc0000 [ 541.497144][T15537] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 541.534238][T15537] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 541.877572][ T24] IPVS: starting estimator thread 0... [ 542.005169][T15558] loop3: detected capacity change from 0 to 1024 [ 542.013936][T15551] IPVS: using max 27 ests per chain, 64800 per kthread [ 542.103614][T15558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.249540][T15558] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.4163: missing EA_INODE flag [ 542.287804][T15558] EXT4-fs (loop3): Remounting filesystem read-only [ 542.414544][ T5992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.427998][T15579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4171'. [ 542.879699][T15592] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 543.005915][T15598] xt_l2tp: unknown flags: 10 [ 543.026697][T15568] loop0: detected capacity change from 0 to 32768 [ 543.106179][T15568] loop0: p1 p3 < p5 p6 > [ 543.120581][T15602] netlink: 'syz.2.4182': attribute type 21 has an invalid length. [ 543.147966][T15602] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4182'. [ 543.175216][T15602] netlink: 'syz.2.4182': attribute type 4 has an invalid length. [ 543.197173][T15602] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4182'. [ 543.663095][T15615] ipt_ECN: cannot use operation on non-tcp rule [ 543.871683][T15618] loop5: detected capacity change from 0 to 256 [ 543.899354][T15621] xt_TCPMSS: Only works on TCP SYN packets [ 544.019079][T15618] FAT-fs (loop5): Directory bread(block 64) failed [ 544.047385][T15618] FAT-fs (loop5): Directory bread(block 65) failed [ 544.088573][T15618] FAT-fs (loop5): Directory bread(block 66) failed [ 544.120088][T15618] FAT-fs (loop5): Directory bread(block 67) failed [ 544.155015][T15618] FAT-fs (loop5): Directory bread(block 68) failed [ 544.182844][T15618] FAT-fs (loop5): Directory bread(block 69) failed [ 544.209744][T15618] FAT-fs (loop5): Directory bread(block 70) failed [ 544.230279][T15618] FAT-fs (loop5): Directory bread(block 71) failed [ 544.251646][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4193'. [ 544.264668][T15618] FAT-fs (loop5): Directory bread(block 72) failed [ 544.278573][T15618] FAT-fs (loop5): Directory bread(block 73) failed [ 544.665488][T15633] Cannot find add_set index 0 as target [ 544.731812][T15634] comedi comedi2: 8255: I/O port conflict (0x8,4) [ 545.147143][T15600] loop4: detected capacity change from 0 to 65536 [ 545.195966][T15600] XFS (loop4): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 545.364615][T15600] XFS (loop4): Ending clean mount [ 545.524082][T15663] loop5: detected capacity change from 0 to 256 [ 545.558315][T15663] exfat: Deprecated parameter 'namecase' [ 545.572397][ T5990] XFS (loop4): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 545.588048][T15663] exfat: Deprecated parameter 'namecase' [ 545.645461][T15663] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 546.694556][T15703] loop2: detected capacity change from 0 to 4096 [ 546.717281][T15694] bond1: entered promiscuous mode [ 546.735175][T15703] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 546.742324][T15694] bond1: entered allmulticast mode [ 546.784901][T15703] ntfs3(loop2): ino=1a, mi_enum_attr [ 546.815584][T15703] ntfs3(loop2): ino=1a, mi_enum_attr [ 546.847778][T15703] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 546.980705][T15713] loop5: detected capacity change from 0 to 64 [ 547.034892][T15713] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 547.083789][T15713] hfs: filesystem is marked locked, mounting read-only. [ 547.197855][T15719] loop0: detected capacity change from 0 to 512 [ 547.322772][T15719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.362682][T15719] ext4 filesystem being mounted at /702/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 547.467190][ T5982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.546077][T15732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.611070][T15736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.704220][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 547.704240][ T30] audit: type=1326 audit(1777315420.979:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.4.4244" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3c699c819 code=0x0 [ 547.895511][T15749] loop2: detected capacity change from 0 to 64 [ 548.022976][T15749] syz.2.4249: attempt to access beyond end of device [ 548.022976][T15749] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 548.107203][T15757] loop3: detected capacity change from 0 to 256 [ 548.146580][T15759] vlan0: entered promiscuous mode [ 548.510964][T15771] x_tables: duplicate underflow at hook 3 [ 548.600176][T15773] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4258'. [ 548.880435][T15784] xt_TCPMSS: Only works on TCP SYN packets [ 548.941358][T15788] netlink: 'syz.1.4266': attribute type 3 has an invalid length. [ 548.978148][T15788] netlink: 'syz.1.4266': attribute type 3 has an invalid length. [ 549.027455][T15788] netlink: 'syz.1.4266': attribute type 3 has an invalid length. [ 549.057094][T15788] netlink: 'syz.1.4266': attribute type 3 has an invalid length. [ 549.088590][T15788] netlink: 'syz.1.4266': attribute type 3 has an invalid length. [ 549.129120][T15788] netlink: 'syz.1.4266': attribute type 3 has an invalid length. [ 549.171784][T15788] netlink: 'syz.1.4266': attribute type 3 has an invalid length. [ 549.215053][T15788] netlink: 'syz.1.4266': attribute type 3 has an invalid length. [ 549.223443][T15788] netlink: 'syz.1.4266': attribute type 3 has an invalid length. [ 549.234173][T15788] netlink: 'syz.1.4266': attribute type 3 has an invalid length. [ 549.481601][T15763] loop5: detected capacity change from 0 to 32768 [ 549.498214][T15802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4274'. [ 550.032344][T15821] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 550.108601][T15821] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 550.174811][T15821] overlayfs: missing 'lowerdir' [ 550.498547][T15840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.422562][T15875] loop2: detected capacity change from 0 to 4096 [ 551.453716][T15875] EXT4-fs: inline encryption not supported [ 551.492394][T15875] EXT4-fs (loop2): Test dummy encryption mode enabled [ 551.528111][T15875] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 551.580145][T15875] System zones: 0-5 [ 551.645880][T15875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.914431][ T30] audit: type=1326 audit(1777315424.908:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.4.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c699c819 code=0x7ffc0000 [ 551.984210][ T5986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.012972][ T30] audit: type=1326 audit(1777315424.936:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.4.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c699c819 code=0x7ffc0000 [ 552.104949][ T30] audit: type=1326 audit(1777315424.945:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.4.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c699c819 code=0x7ffc0000 [ 552.179715][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4326'. [ 552.208382][ T30] audit: type=1326 audit(1777315424.945:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.4.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c699c819 code=0x7ffc0000 [ 552.284361][ T30] audit: type=1326 audit(1777315424.945:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.4.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7ff3c699c819 code=0x7ffc0000 [ 552.368464][ T30] audit: type=1326 audit(1777315424.945:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.4.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c699c819 code=0x7ffc0000 [ 552.483651][ T30] audit: type=1326 audit(1777315424.945:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.4.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c699c819 code=0x7ffc0000 [ 552.528065][T15918] nfs: Deprecated parameter 'nointr' [ 552.600769][ T30] audit: type=1326 audit(1777315424.945:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.4.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff3c699c819 code=0x7ffc0000 [ 552.715120][ T30] audit: type=1326 audit(1777315424.945:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.4.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff3c699c819 code=0x7ffc0000 [ 552.858493][T15878] loop3: detected capacity change from 0 to 32768 [ 553.236678][ T9] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 553.374131][T15948] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 553.441590][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 553.496940][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 553.542950][ T9] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 553.571216][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.608660][ T9] usb 1-1: Product: syz [ 553.628890][ T9] usb 1-1: Manufacturer: syz [ 553.652199][ T9] usb 1-1: SerialNumber: syz [ 553.677155][ T9] usb 1-1: config 0 descriptor?? [ 553.691427][T15935] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 553.728845][T15961] warning: `syz.2.4350' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 553.857443][ T9] rc_core: IR keymap rc-streamzap not found [ 553.890562][ T9] Registered IR keymap rc-empty [ 553.906895][ T30] audit: type=1326 audit(1777315426.779:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.1.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86a59c819 code=0x7ffc0000 [ 553.933317][ T9] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 553.986975][ T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input30 [ 554.021637][ T30] audit: type=1326 audit(1777315426.779:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.1.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86a59c819 code=0x7ffc0000 [ 554.081716][ T30] audit: type=1326 audit(1777315426.788:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.1.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7ff86a59c819 code=0x7ffc0000 [ 554.086288][T15975] xt_l2tp: v2 tid > 0xffff: 262144 [ 554.108995][ T9] usb 1-1: USB disconnect, device number 94 [ 554.155442][ T30] audit: type=1326 audit(1777315426.788:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.1.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86a59c819 code=0x7ffc0000 [ 554.239252][ T30] audit: type=1326 audit(1777315426.788:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15966 comm="syz.1.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86a59c819 code=0x7ffc0000 [ 554.336319][T15985] loop4: detected capacity change from 0 to 256 [ 554.550067][T15985] FAT-fs (loop4): Directory bread(block 64) failed [ 554.583085][T15985] FAT-fs (loop4): Directory bread(block 65) failed [ 554.590030][ T30] audit: type=1326 audit(1777315427.415:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.3.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58f99c819 code=0x7ffc0000 [ 554.629916][T15985] FAT-fs (loop4): Directory bread(block 66) failed [ 554.643790][T15985] FAT-fs (loop4): Directory bread(block 67) failed [ 554.667210][T15985] FAT-fs (loop4): Directory bread(block 68) failed [ 554.673069][T15993] loop3: detected capacity change from 0 to 512 [ 554.689610][ T30] audit: type=1326 audit(1777315427.415:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.3.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58f99c819 code=0x7ffc0000 [ 554.718796][T15985] FAT-fs (loop4): Directory bread(block 69) failed [ 554.738375][T15985] FAT-fs (loop4): Directory bread(block 70) failed [ 554.751574][T15993] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 554.765506][T15985] FAT-fs (loop4): Directory bread(block 71) failed [ 554.777002][ T30] audit: type=1326 audit(1777315427.415:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.3.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58f99c819 code=0x7ffc0000 [ 554.799388][T15985] FAT-fs (loop4): Directory bread(block 72) failed [ 554.799421][T15985] FAT-fs (loop4): Directory bread(block 73) failed [ 554.809187][T15993] System zones: [ 554.814292][ T30] audit: type=1326 audit(1777315427.434:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.3.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58f99c819 code=0x7ffc0000 [ 554.840566][ T30] audit: type=1326 audit(1777315427.434:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.3.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58f99c819 code=0x7ffc0000 [ 554.871143][T15993] 1-20 [ 554.917869][T15993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.940168][T16004] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4370'. [ 554.974323][T16004] 0·: renamed from hsr_slave_1 (while UP) [ 555.024151][T16004] 0·: entered allmulticast mode [ 555.047263][T16004] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 555.235142][ T5992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.632850][T16032] loop0: detected capacity change from 0 to 256 [ 555.660168][T16032] exfat: Deprecated parameter 'utf8' [ 555.692763][T16032] exfat: Deprecated parameter 'namecase' [ 555.753227][T16032] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 555.891845][T16026] loop5: detected capacity change from 0 to 8192 [ 555.939044][T16036] loop3: detected capacity change from 0 to 4096 [ 555.979714][T16036] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 556.124746][T16044] validate_nla: 44 callbacks suppressed [ 556.124769][T16044] netlink: 'syz.2.4390': attribute type 1 has an invalid length. [ 556.132322][T16036] ntfs3(loop3): ino=19, mi_enum_attr [ 556.248870][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4390'. [ 556.348107][T16048] loop0: detected capacity change from 0 to 16 [ 556.356482][T16036] ntfs3(loop3): failed to convert "c46c" to cp1255 [ 556.410740][T16048] erofs (device loop0): DAX unsupported by block device. Turning off DAX. [ 556.424095][T16036] ntfs3(loop3): ino=20, mi_enum_attr [ 556.458237][T16048] erofs (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 556.513783][T16048] erofs (device loop0): mounted with root inode @ nid 36. [ 556.535953][T16050] loop5: detected capacity change from 0 to 2048 [ 556.584813][T16048] syz.0.4391: attempt to access beyond end of device [ 556.584813][T16048] loop0: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 556.631654][T16050] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 556.697631][T16048] syz.0.4391: attempt to access beyond end of device [ 556.697631][T16048] loop0: rw=0, sector=46, nr_sectors = 1 limit=16 [ 556.760986][T16048] erofs (device loop0): read error -5 @ 0 of nid 36 [ 556.776751][T16050] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 556.854570][T16050] UDF-fs: error (device loop5): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 557.284493][T16040] loop1: detected capacity change from 0 to 32768 [ 557.323513][T16040] (syz.1.4389,16040,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 557.389474][T16040] (syz.1.4389,16040,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 557.464367][T16040] JBD2: Ignoring recovery information on journal [ 557.647148][T16040] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 558.218996][T16105] loop4: detected capacity change from 0 to 65 [ 558.256542][T16105] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 558.302897][T16105] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 558.513104][T16115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4421'. [ 558.528240][ T5981] ocfs2: Unmounting device (7,1) on (node local) [ 558.604281][T16115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4421'. [ 559.093163][T16135] vlan0: entered promiscuous mode [ 559.244100][T16142] loop1: detected capacity change from 0 to 1024 [ 559.291252][T16142] EXT4-fs: Ignoring removed orlov option [ 559.347286][T16142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.475395][ T5981] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.546151][T16156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4441'. [ 559.662727][T16163] loop3: detected capacity change from 0 to 1024 [ 559.698303][T16163] EXT4-fs: Ignoring removed mblk_io_submit option [ 559.744789][T16163] EXT4-fs: Ignoring removed bh option [ 559.792214][T16163] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 559.862973][T16163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.889064][T16163] ext4 filesystem being mounted at /734/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.087766][T16179] netlink: 'syz.0.4449': attribute type 1 has an invalid length. [ 560.195006][ T5992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 560.664457][T16198] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 560.727446][T16198] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 560.765673][T16198] overlayfs: missing 'lowerdir' [ 560.931169][T16200] loop3: detected capacity change from 0 to 4096 [ 560.973539][T16200] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 561.060322][T16200] ntfs3(loop3): ino=19, mi_enum_attr [ 561.090779][T16213] netlink: 'syz.0.4466': attribute type 1 has an invalid length. [ 561.114336][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4467'. [ 561.184291][T16200] ntfs3(loop3): failed to convert "c46c" to iso8859-4 [ 561.209788][T16177] loop5: detected capacity change from 0 to 32768 [ 561.233939][T16200] ntfs3(loop3): ino=20, mi_enum_attr [ 561.256996][T16177] XFS (loop5): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 561.400552][T16177] XFS (loop5): Metadata corruption detected at xfs_dinode_verify+0x1a9/0x1590, inode 0x1803 dinode [ 561.482136][T16177] XFS (loop5): Unmount and run xfs_repair [ 561.490490][T16177] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 561.507829][T16177] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 561.522633][T16177] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 561.606044][T16177] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 561.668014][T16177] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 561.714103][T16177] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 561.721711][T16240] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 561.756310][T16177] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 561.769352][T16240] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 561.792269][T16177] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 561.843200][T16177] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 562.010701][ T5994] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 562.525736][T16266] loop2: detected capacity change from 0 to 1024 [ 562.620197][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4491'. [ 562.679889][T16270] netlink: 'syz.1.4492': attribute type 21 has an invalid length. [ 562.687307][T16266] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 562.719001][T16270] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4492'. [ 562.766116][T16270] netlink: 'syz.1.4492': attribute type 4 has an invalid length. [ 562.795002][T16270] netlink: 'syz.1.4492': attribute type 3 has an invalid length. [ 562.822434][T16270] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4492'. [ 563.151175][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4500'. [ 563.186149][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4500'. [ 563.225716][T16288] netlink: 'syz.3.4500': attribute type 1 has an invalid length. [ 563.316301][ T24] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 563.385320][T16293] loop0: detected capacity change from 0 to 512 [ 563.422513][T16293] EXT4-fs: Ignoring removed oldalloc option [ 563.430970][T16299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4505'. [ 563.461453][T16293] EXT4-fs (loop0): Test dummy encryption mode enabled [ 563.540942][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 563.542112][T16293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.563701][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.595295][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 563.613463][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.631106][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 563.640670][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.648718][ T24] usb 6-1: Product: syz [ 563.653059][ T24] usb 6-1: Manufacturer: syz [ 563.665736][T16307] loop4: detected capacity change from 0 to 512 [ 563.672125][ T24] usb 6-1: SerialNumber: syz [ 563.694464][T16307] EXT4-fs (loop4): Test dummy encryption mode enabled [ 563.712315][ T24] cdc_ncm 6-1:1.0: skipping garbage [ 563.726382][ T24] cdc_ncm 6-1:1.0: skipping garbage [ 563.745147][ T24] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 563.754635][T16307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 563.768911][ T24] cdc_ncm 6-1:1.0: bind() failure [ 563.808918][T16293] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 563.870103][T16307] EXT4-fs (loop4): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 563.968208][ T24] usb 6-1: USB disconnect, device number 97 [ 563.989442][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.063423][ T5982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.454502][ T6051] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 565.639212][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 565.639234][ T30] audit: type=1326 audit(1777315437.743:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16384 comm="syz.5.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945859c819 code=0x7ffc0000 [ 565.688770][ T6051] usb 3-1: unable to get BOS descriptor or descriptor too short [ 565.725178][ T6051] usb 3-1: not running at top speed; connect to a high speed hub [ 565.761402][ T6051] usb 3-1: config 1 has an invalid interface number: 8 but max is 2 [ 565.781032][ T30] audit: type=1326 audit(1777315437.790:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16384 comm="syz.5.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945859c819 code=0x7ffc0000 [ 565.806758][ T6051] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.828007][ T6051] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 565.869168][ T6051] usb 3-1: config 1 has no interface number 0 [ 565.897160][ T30] audit: type=1326 audit(1777315437.790:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16384 comm="syz.5.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f945859c819 code=0x7ffc0000 [ 565.898492][ T6051] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 566.006891][ T30] audit: type=1326 audit(1777315437.790:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16384 comm="syz.5.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945859c819 code=0x7ffc0000 [ 566.034309][ T6051] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 566.054907][ T6051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.093382][ T6051] usb 3-1: Product: syz [ 566.105824][ T6051] usb 3-1: Manufacturer: syz [ 566.114909][ T6051] usb 3-1: SerialNumber: syz [ 566.123969][ T30] audit: type=1326 audit(1777315437.790:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16384 comm="syz.5.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945859c819 code=0x7ffc0000 [ 566.194168][ T6051] usb 3-1: unknown sample rate [ 566.210146][T16403] loop4: detected capacity change from 0 to 512 [ 566.229402][ T6051] usb 3-1: unknown sample rate [ 566.276054][T16403] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.4555: EA inode hash validation failed [ 566.350463][T16403] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.4555: corrupted inode contents [ 566.436069][T16410] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4558'. [ 566.464153][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.464229][T16403] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 566.491380][T16410] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4558'. [ 566.530270][T16403] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #15: comm syz.4.4555: mark_inode_dirty error [ 566.530308][T16403] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 566.533566][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 566.533598][ C1] EXT4-fs (loop4): initial error at time 1777315438: ext4_do_update_inode:5690: inode 15 [ 566.533640][ C1] EXT4-fs (loop4): last error at time 1777315438: ext4_dirty_inode:6587: inode 15 [ 566.535868][T16403] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.4555: corrupted inode contents [ 566.558032][T16414] capability: warning: `syz.5.4560' uses deprecated v2 capabilities in a way that may be insecure [ 566.565498][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4558'. [ 566.598184][T16403] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 566.635182][ T6085] usb 3-1: USB disconnect, device number 95 [ 566.666658][T16403] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.4555: mark_inode_dirty error [ 566.733174][T16403] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 566.739841][T16403] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.4555: mark inode dirty (error -117) [ 566.817864][T16403] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 566.819673][T16403] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 566.886259][T16403] EXT4-fs (loop4): 1 orphan inode deleted [ 566.903259][T16403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.916591][T16422] usb usb8: usbfs: process 16422 (syz.5.4564) did not claim interface 1 before use [ 567.018181][T16426] deleting an unspecified loop device is not supported. [ 567.049734][T16428] loop0: detected capacity change from 0 to 256 [ 567.095431][T16428] FAT-fs (loop0): Directory bread(block 64) failed [ 567.111189][T16428] FAT-fs (loop0): Directory bread(block 65) failed [ 567.120550][T16428] FAT-fs (loop0): Directory bread(block 66) failed [ 567.136545][T16428] FAT-fs (loop0): Directory bread(block 67) failed [ 567.144902][T16428] FAT-fs (loop0): Directory bread(block 68) failed [ 567.177427][T16428] FAT-fs (loop0): Directory bread(block 69) failed [ 567.183756][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.196837][T16428] FAT-fs (loop0): Directory bread(block 70) failed [ 567.206220][T16432] netlink: 'syz.5.4569': attribute type 10 has an invalid length. [ 567.222047][T16428] FAT-fs (loop0): Directory bread(block 71) failed [ 567.262592][T16428] FAT-fs (loop0): Directory bread(block 72) failed [ 567.300904][T16428] FAT-fs (loop0): Directory bread(block 73) failed [ 567.306448][T16432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.369992][T16432] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 567.383700][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4572'. [ 567.393854][T16434] loop1: detected capacity change from 0 to 128 [ 567.496327][T16434] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 567.532062][T16434] FAT-fs (loop1): Filesystem has been set read-only [ 567.862893][T16450] nftables ruleset with unbound chain [ 567.892425][T16442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 568.126907][T16459] 9pnet_virtio: no channels available for device syz [ 568.194605][T16455] loop5: detected capacity change from 0 to 4096 [ 568.288381][T16464] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 568.346012][T16439] loop4: detected capacity change from 0 to 32768 [ 568.382567][T16455] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 568.390150][T16439] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4570 (16439) [ 568.471445][T16439] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 568.518497][T16439] BTRFS info (device loop4): using sha256 checksum algorithm [ 568.526526][T16455] Remounting filesystem read-only [ 568.538799][T16466] loop2: detected capacity change from 0 to 4096 [ 568.615184][T16485] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 568.689863][T16487] loop3: detected capacity change from 0 to 64 [ 568.690519][T16439] BTRFS info (device loop4): enabling ssd optimizations [ 568.705384][T16439] BTRFS info (device loop4): turning on async discard [ 568.712196][T16439] BTRFS info (device loop4): enabling free space tree [ 568.995652][ T5990] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 569.008016][T16492] loop0: detected capacity change from 0 to 2048 [ 569.169585][T16498] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 569.197357][T16499] loop3: detected capacity change from 0 to 16 [ 569.344101][T16499] erofs (device loop3): mounted with root inode @ nid 36. [ 569.405672][T16506] netlink: 'syz.5.4597': attribute type 1 has an invalid length. [ 569.476074][T16506] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4597'. [ 569.875533][T16519] Cannot find add_set index 0 as target [ 569.933420][ T6138] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 570.139704][ T6138] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 570.163316][ T6138] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 570.186530][T16531] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4608'. [ 570.217070][ T6138] usb 3-1: config 0 has no interface number 0 [ 570.245554][ T6138] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 570.279117][ T6138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.307651][T16531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.327142][ T6138] usb 3-1: Product: syz [ 570.344026][ T6138] usb 3-1: Manufacturer: syz [ 570.363236][ T6138] usb 3-1: SerialNumber: syz [ 570.374945][T16531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.390808][ T6138] usb 3-1: config 0 descriptor?? [ 570.443291][T16531] bond0 (unregistering): Released all slaves [ 570.731019][T16549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4617'. [ 570.856465][ T6138] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 570.873866][ T24] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 570.878404][ T6138] uvcvideo 3-1:0.64: No valid video chain found. [ 570.909908][ T6138] usb 3-1: USB disconnect, device number 96 [ 571.084484][T16561] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 571.087071][ T24] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 571.159769][T16564] netlink: 'syz.1.4626': attribute type 10 has an invalid length. [ 571.162286][ T24] usb 4-1: config 0 has no interface number 0 [ 571.203716][ T24] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 571.237279][ T24] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 571.289114][ T24] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 571.321534][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.354297][ T24] usb 4-1: Product: syz [ 571.368912][ T24] usb 4-1: Manufacturer: syz [ 571.385653][ T24] usb 4-1: SerialNumber: syz [ 571.400602][ T24] usb 4-1: config 0 descriptor?? [ 571.413865][T16547] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 571.443832][ T24] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 571.499277][ T24] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 571.790412][T16583] loop5: detected capacity change from 0 to 64 [ 572.052412][ T6138] usb 4-1: USB disconnect, device number 94 [ 572.114888][ T6138] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 572.153309][ T6138] cyberjack 4-1:0.69: device disconnected [ 572.188533][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4640'. [ 572.229047][T16593] vxcan3: entered promiscuous mode [ 572.318044][T16599] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 572.651617][T16613] loop0: detected capacity change from 0 to 256 [ 573.013594][T16624] loop0: detected capacity change from 0 to 8 [ 573.604028][T16607] loop2: detected capacity change from 0 to 32768 [ 573.656962][T16607] ERROR: (device loop2): diAllocBit: iag inconsistent [ 573.656962][T16607] [ 573.673483][T16650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4666'. [ 573.679126][T16607] ialloc: diAlloc returned -5! [ 573.788407][T16651] loop3: detected capacity change from 0 to 1764 [ 573.860856][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.867311][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.205048][T16660] loop4: detected capacity change from 0 to 512 [ 574.240105][T16660] EXT4-fs: Ignoring removed orlov option [ 574.274291][T16660] EXT4-fs: Ignoring removed mblk_io_submit option [ 574.384468][T16660] EXT4-fs (loop4): orphan cleanup on readonly fs [ 574.403820][T16660] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 574.415924][T16660] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.4672: attempt to clear invalid blocks 2 len 1 [ 574.445093][T16660] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 574.465022][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 574.480652][ C1] EXT4-fs (loop4): initial error at time 1777315446: ext4_clear_blocks:876: inode 13 [ 574.490173][ C1] EXT4-fs (loop4): last error at time 1777315446: ext4_clear_blocks:876: inode 13 [ 574.521040][T16660] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 574.577921][T16660] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4672: invalid indirect mapped block 1819239214 (level 0) [ 574.601772][T16645] loop5: detected capacity change from 0 to 32768 [ 574.612424][T16660] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 574.682129][T16645] JBD2: Ignoring recovery information on journal [ 574.742343][T16660] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4672: invalid indirect mapped block 1819239214 (level 1) [ 574.820519][T16660] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 574.838482][T16660] EXT4-fs (loop4): 1 truncate cleaned up [ 574.869555][T16645] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 574.909789][T16657] loop2: detected capacity change from 0 to 32768 [ 574.914914][T16660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 575.132318][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.319755][ T5994] ocfs2: Unmounting device (7,5) on (node local) [ 575.365378][T16684] netlink: 'syz.4.4682': attribute type 10 has an invalid length. [ 575.432117][T16684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.474458][T16684] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 576.102927][T16701] loop1: detected capacity change from 0 to 4096 [ 576.170107][T16701] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 576.267774][T16701] ntfs3(loop1): Failed to load $Extend (-22). [ 576.305856][T16701] ntfs3(loop1): Failed to initialize $Extend. [ 576.377230][T16718] syz.5.4698 (16718): /proc/16716/oom_adj is deprecated, please use /proc/16716/oom_score_adj instead. [ 576.634289][T16724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4700'. [ 576.694512][T16724] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 576.745065][T16724] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4700'. [ 577.219865][T16753] netlink: 'syz.0.4714': attribute type 92 has an invalid length. [ 577.981279][T16784] netlink: 'syz.0.4730': attribute type 1 has an invalid length. [ 578.214756][T16792] lo speed is unknown, defaulting to 1000 [ 578.258314][T16792] lo speed is unknown, defaulting to 1000 [ 578.309882][T16792] lo speed is unknown, defaulting to 1000 [ 578.344572][T16792] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 578.383272][T16755] loop3: detected capacity change from 0 to 32768 [ 578.427503][T16792] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 578.505490][T16792] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 578.590969][T16792] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 578.685231][T16792] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 578.730781][ T6138] usb 6-1: new full-speed USB device number 98 using dummy_hcd [ 578.825278][T16792] lo speed is unknown, defaulting to 1000 [ 578.835914][T16792] lo speed is unknown, defaulting to 1000 [ 578.843647][T16792] lo speed is unknown, defaulting to 1000 [ 578.853568][T16792] lo speed is unknown, defaulting to 1000 [ 578.858492][ T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 578.862433][T16792] lo speed is unknown, defaulting to 1000 [ 578.878139][T16792] lo speed is unknown, defaulting to 1000 [ 578.916724][ T6138] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 578.941832][T16814] loop0: detected capacity change from 0 to 4096 [ 578.952644][ T6138] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 578.979918][T16814] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 578.997814][ T6138] usb 6-1: config 8 has no interface number 0 [ 579.017797][ T6138] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 579.055127][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 579.072014][ T9] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 579.089423][ T6138] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 579.109172][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 579.128449][ T6138] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.155666][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 579.171512][ T6138] usb 6-1: Product: syz [ 579.186204][ T6138] usb 6-1: Manufacturer: syz [ 579.195185][T16818] bridge0: port 3(hsr0) entered blocking state [ 579.202490][ T6138] usb 6-1: SerialNumber: syz [ 579.206201][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 579.241213][T16818] bridge0: port 3(hsr0) entered disabled state [ 579.252450][T16814] ntfs3(loop0): ino=19, mi_enum_attr [ 579.258942][T16818] hsr0: entered allmulticast mode [ 579.267482][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.274264][T16818] hsr_slave_0: entered allmulticast mode [ 579.280781][T16814] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 579.308432][T16818] hsr_slave_1: entered allmulticast mode [ 579.321165][ T9] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 579.321401][T16818] hsr0: entered promiscuous mode [ 579.355227][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.366531][T16818] bridge0: port 3(hsr0) entered blocking state [ 579.374588][T16818] bridge0: port 3(hsr0) entered forwarding state [ 579.408107][ T9] usb 3-1: config 0 descriptor?? [ 579.438083][T16808] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 579.458959][ T6138] usb 6-1: USB disconnect, device number 98 [ 579.489680][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input31 [ 579.838961][ T24] usb 3-1: USB disconnect, device number 97 [ 579.856209][ T5189] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 579.916684][T16833] loop1: detected capacity change from 0 to 256 [ 579.942402][T16836] usb usb8: usbfs: process 16836 (syz.4.4756) did not claim interface 0 before use [ 579.979346][T16833] FAT-fs (loop1): Directory bread(block 64) failed [ 579.986623][T16833] FAT-fs (loop1): Directory bread(block 65) failed [ 579.995301][T16833] FAT-fs (loop1): Directory bread(block 66) failed [ 580.014201][T16833] FAT-fs (loop1): Directory bread(block 67) failed [ 580.031753][T16833] FAT-fs (loop1): Directory bread(block 68) failed [ 580.038615][T16833] FAT-fs (loop1): Directory bread(block 69) failed [ 580.069931][T16833] FAT-fs (loop1): Directory bread(block 70) failed [ 580.101668][T16833] FAT-fs (loop1): Directory bread(block 71) failed [ 580.122465][T16833] FAT-fs (loop1): Directory bread(block 72) failed [ 580.146283][T16833] FAT-fs (loop1): Directory bread(block 73) failed [ 580.472470][ T6138] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 580.644679][T16857] netlink: zone id is out of range [ 580.659247][ T6138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 580.664356][T16857] netlink: zone id is out of range [ 580.689121][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4767'. [ 580.704518][ T6138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 580.725464][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4767'. [ 580.730796][T16857] netlink: zone id is out of range [ 580.762898][T16857] netlink: zone id is out of range [ 580.764532][ T6138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 580.778260][T16857] netlink: zone id is out of range [ 580.800868][ T6138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 580.812256][T16857] netlink: zone id is out of range [ 580.820544][T16857] netlink: zone id is out of range [ 580.825886][ T6138] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 580.837455][ T6138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.857951][T16857] netlink: zone id is out of range [ 580.858029][ T6138] usb 1-1: Product: syz [ 580.877433][T16857] netlink: zone id is out of range [ 580.887876][ T6138] usb 1-1: Manufacturer: syz [ 580.908463][ T6138] usb 1-1: SerialNumber: syz [ 580.912242][T16857] netlink: zone id is out of range [ 580.940685][ T6138] usb 1-1: config 0 descriptor?? [ 581.217718][ T6138] adutux 1-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 581.266216][ T6138] usb 1-1: USB disconnect, device number 95 [ 581.414023][T16889] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4781'. [ 581.414054][T16889] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4781'. [ 581.910718][T16908] loop5: detected capacity change from 0 to 512 [ 581.977948][T16908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.004063][T16908] ext4 filesystem being mounted at /791/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 582.136889][ T5994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.602588][T16938] loop4: detected capacity change from 0 to 2048 [ 582.642127][T16938] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 583.001520][T16952] loop0: detected capacity change from 0 to 256 [ 583.083519][T16955] xt_socket: unknown flags 0x8 [ 583.393085][T16966] netlink: 'syz.4.4819': attribute type 3 has an invalid length. [ 583.547266][T16935] loop5: detected capacity change from 0 to 32768 [ 583.775917][T16977] loop0: detected capacity change from 0 to 256 [ 583.852575][T16977] FAT-fs (loop0): Directory bread(block 64) failed [ 583.881326][T16977] FAT-fs (loop0): Directory bread(block 65) failed [ 583.904989][T16977] FAT-fs (loop0): Directory bread(block 66) failed [ 583.925452][T16977] FAT-fs (loop0): Directory bread(block 67) failed [ 583.945140][T16977] FAT-fs (loop0): Directory bread(block 68) failed [ 583.953916][T16977] FAT-fs (loop0): Directory bread(block 69) failed [ 583.962224][T16977] FAT-fs (loop0): Directory bread(block 70) failed [ 583.969755][T16977] FAT-fs (loop0): Directory bread(block 71) failed [ 583.983329][T16977] FAT-fs (loop0): Directory bread(block 72) failed [ 583.991015][T16977] FAT-fs (loop0): Directory bread(block 73) failed [ 584.096479][ T6085] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 584.269929][ T6085] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 584.290311][ T6085] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 584.321684][ T6085] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 584.339793][ T6085] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 584.365957][ T6085] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 584.384374][ T6085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.396966][T16995] loop2: detected capacity change from 0 to 16 [ 584.414483][ T6085] usb 5-1: Product: syz [ 584.414723][T16995] erofs (device loop2): mounted with root inode @ nid 36. [ 584.428641][ T6085] usb 5-1: Manufacturer: syz [ 584.448542][ T6085] usb 5-1: SerialNumber: syz [ 584.479376][T16995] syz.2.4833: attempt to access beyond end of device [ 584.479376][T16995] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 584.496149][ T6085] usb 5-1: config 0 descriptor?? [ 584.534094][ T6085] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 61, bLength 9, bSynchAddress 61 [ 584.556662][T16995] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 584.613849][T16995] erofs (device loop2): read error -117 @ 0 of nid 89 [ 584.648758][ T30] audit: type=1800 audit(1777315455.537:74): pid=16995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4833" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 584.955391][T17011] netlink: 'syz.5.4839': attribute type 21 has an invalid length. [ 584.976833][ T6085] usb 5-1: USB disconnect, device number 90 [ 585.022106][T17011] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4839'. [ 585.167368][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.343369][T17023] netlink: 'syz.3.4844': attribute type 1 has an invalid length. [ 585.370881][T17023] netlink: 'syz.3.4844': attribute type 2 has an invalid length. [ 585.412230][T16999] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 585.467924][T16999] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 585.528277][T16999] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 585.576249][T16999] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 585.701477][T16999] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 585.751508][T16999] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 585.798482][T16999] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 585.829155][T16999] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 586.023517][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4853'. [ 586.035758][T17046] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 586.697146][T17071] loop4: detected capacity change from 0 to 512 [ 586.740567][T17071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 586.837436][T17071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.841562][T17080] loop1: detected capacity change from 0 to 1024 [ 586.858209][T17080] EXT4-fs: Ignoring removed mblk_io_submit option [ 586.865825][T17071] ext4 filesystem being mounted at /853/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 586.876498][T17080] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 586.933090][T17080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.935432][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.997325][T17080] EXT4-fs error (device loop1): __ext4_iget:5481: inode #12: block 13: comm syz.1.4867: invalid block [ 587.084737][T17080] EXT4-fs (loop1): Remounting filesystem read-only [ 587.247992][ T5981] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.792761][ T30] audit: type=1326 audit(1777315458.474:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17109 comm="syz.2.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 587.802879][T17108] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4878'. [ 587.848190][T17108] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4878'. [ 587.873548][ T30] audit: type=1326 audit(1777315458.474:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17109 comm="syz.2.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 587.957937][ T30] audit: type=1326 audit(1777315458.512:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17109 comm="syz.2.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 588.053578][ T30] audit: type=1326 audit(1777315458.512:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17109 comm="syz.2.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 588.085920][ T30] audit: type=1326 audit(1777315458.512:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17109 comm="syz.2.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 588.124250][ T30] audit: type=1326 audit(1777315458.512:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17109 comm="syz.2.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 588.205312][ T30] audit: type=1326 audit(1777315458.512:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17109 comm="syz.2.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 588.249032][T17122] QAT: Device 4 not found [ 588.323801][ T30] audit: type=1326 audit(1777315458.512:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17109 comm="syz.2.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 588.591158][T17138] loop5: detected capacity change from 0 to 512 [ 588.623228][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4892'. [ 588.660105][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4892'. [ 588.671131][T17138] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a857e02c, mo2=0102] [ 588.711241][T17138] System zones: 1-12 [ 588.733303][T17138] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4890: invalid indirect mapped block 8 (level 2) [ 588.834290][T17138] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 588.842120][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 588.857750][ C1] EXT4-fs (loop5): initial error at time 1777315459: ext4_free_branches:1023: inode 11 [ 588.867442][ C1] EXT4-fs (loop5): last error at time 1777315459: ext4_free_branches:1023: inode 11 [ 588.934039][T17138] EXT4-fs (loop5): Remounting filesystem read-only [ 589.006105][T17138] EXT4-fs (loop5): 1 truncate cleaned up [ 589.052336][T17138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.258669][ T5994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.463907][T17174] loop2: detected capacity change from 0 to 512 [ 589.466779][T17177] loop3: detected capacity change from 0 to 256 [ 589.471049][T17178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4907'. [ 589.515564][T17174] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 589.524570][T17177] exfat: Deprecated parameter 'utf8' [ 589.527729][T17181] netlink: 'syz.4.4910': attribute type 5 has an invalid length. [ 589.549849][T17178] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 589.561642][T17177] exfat: Deprecated parameter 'namecase' [ 589.623530][T17174] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.4906: invalid block [ 589.626931][T17177] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 589.651073][T17174] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 589.654516][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 589.670108][ C0] EXT4-fs (loop2): initial error at time 1777315460: ext4_get_branch:178: inode 11: block 4294967295 [ 589.681058][ C0] EXT4-fs (loop2): last error at time 1777315460: ext4_get_branch:178: inode 11: block 4294967295 [ 589.705010][T17174] EXT4-fs (loop2): Remounting filesystem read-only [ 589.712331][T17174] EXT4-fs (loop2): 2 truncates cleaned up [ 589.773239][T17174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.781752][T17188] loop5: detected capacity change from 0 to 64 [ 590.061918][ T5986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.898291][T17236] loop0: detected capacity change from 0 to 1024 [ 591.238362][T17241] loop1: detected capacity change from 0 to 4096 [ 591.291449][T17241] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 591.429889][T17257] netlink: 'syz.0.4938': attribute type 3 has an invalid length. [ 591.481676][T17257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4938'. [ 592.352948][ T802] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 592.553343][ T802] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 592.585746][ T802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.618622][ T802] usb 1-1: Product: syz [ 592.635282][ T802] usb 1-1: Manufacturer: syz [ 592.655718][ T802] usb 1-1: SerialNumber: syz [ 592.669764][ T7031] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 592.692553][ T802] r8152-cfgselector 1-1: Unknown version 0x0000 [ 592.717056][ T802] r8152-cfgselector 1-1: config 0 descriptor?? [ 592.861301][ T7031] usb 4-1: Using ep0 maxpacket: 16 [ 592.878933][ T7031] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 592.903685][ T7031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.034807][ T7031] usb 4-1: config 0 descriptor?? [ 593.052408][ T7031] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 593.211792][ T9] r8152-cfgselector 1-1: USB disconnect, device number 96 [ 593.275252][ T7031] usb 4-1: Detected FT232B [ 593.447685][T17337] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4972'. [ 593.491753][ T7031] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 593.502467][T17337] net_ratelimit: 41 callbacks suppressed [ 593.502484][T17337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 593.521925][ T7031] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 593.575547][ T7031] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 593.631256][ T7031] usb 4-1: USB disconnect, device number 95 [ 593.671424][ T7031] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 593.710901][ T7031] ftdi_sio 4-1:0.0: device disconnected [ 594.548609][T17369] loop2: detected capacity change from 0 to 8192 [ 594.704375][T17380] loop0: detected capacity change from 0 to 4096 [ 594.900920][T17390] loop5: detected capacity change from 0 to 1764 [ 595.051961][T17390] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 595.193093][T17403] loop1: detected capacity change from 0 to 128 [ 595.880667][T17428] loop3: detected capacity change from 0 to 764 [ 595.882837][T17421] loop4: detected capacity change from 0 to 2048 [ 595.981392][T17421] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 596.094404][T17437] No control pipe specified [ 596.099074][T17421] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 596.358986][T17448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5017'. [ 596.867958][ T30] audit: type=1326 audit(1777315466.969:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.3.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58f99c819 code=0x7ffc0000 [ 596.961905][ T30] audit: type=1326 audit(1777315466.969:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.3.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58f99c819 code=0x7ffc0000 [ 597.048827][ T30] audit: type=1326 audit(1777315466.969:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17469 comm="syz.3.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fa58f99c819 code=0x7ffc0000 [ 597.282106][ T30] audit: type=1326 audit(1777315467.362:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.2.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 597.385777][ T30] audit: type=1326 audit(1777315467.362:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.2.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 597.480568][ T30] audit: type=1326 audit(1777315467.362:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.2.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 597.572444][ T30] audit: type=1326 audit(1777315467.362:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.2.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 597.620320][ T30] audit: type=1326 audit(1777315467.362:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.2.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 597.726620][ T30] audit: type=1326 audit(1777315467.362:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.2.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 597.812968][ T30] audit: type=1326 audit(1777315467.362:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.2.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 598.023314][T17517] loop1: detected capacity change from 0 to 164 [ 598.192821][T17521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5049'. [ 598.690548][T17543] loop2: detected capacity change from 0 to 65 [ 598.730297][T17543] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 598.933151][ T6085] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 599.117608][ T6085] usb 4-1: unable to get BOS descriptor or descriptor too short [ 599.157023][ T6085] usb 4-1: config 179 has an invalid interface number: 156 but max is 0 [ 599.184017][ T6085] usb 4-1: config 179 has no interface number 0 [ 599.214531][ T6085] usb 4-1: config 179 interface 156 has no altsetting 0 [ 599.254855][ T6085] usb 4-1: string descriptor 0 read error: -22 [ 599.278255][ T6085] usb 4-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=74.98 [ 599.321300][ T6085] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.348527][T17567] loop0: detected capacity change from 0 to 64 [ 599.365040][ T6085] lan78xx 4-1:179.156 (unnamed net_device) (uninitialized): USB bus speed not supported [ 599.411072][ T6085] lan78xx 4-1:179.156: probe with driver lan78xx failed with error -5 [ 599.624770][ T6085] usb 4-1: USB disconnect, device number 96 [ 599.945310][T17587] loop0: detected capacity change from 0 to 256 [ 600.039512][T17589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.087670][ T6085] lo speed is unknown, defaulting to 1000 [ 600.127077][T17587] FAT-fs (loop0): Directory bread(block 64) failed [ 600.152059][T17587] FAT-fs (loop0): Directory bread(block 65) failed [ 600.182800][T17587] FAT-fs (loop0): Directory bread(block 66) failed [ 600.211951][T17587] FAT-fs (loop0): Directory bread(block 67) failed [ 600.250033][T17587] FAT-fs (loop0): Directory bread(block 68) failed [ 600.289331][T17587] FAT-fs (loop0): Directory bread(block 69) failed [ 600.321435][T17587] FAT-fs (loop0): Directory bread(block 70) failed [ 600.347819][T17587] FAT-fs (loop0): Directory bread(block 71) failed [ 600.377552][T17587] FAT-fs (loop0): Directory bread(block 72) failed [ 600.409735][T17587] FAT-fs (loop0): Directory bread(block 73) failed [ 600.486727][T17563] loop5: detected capacity change from 0 to 32768 [ 600.559486][T17563] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 600.711801][T17563] XFS (loop5): Ending clean mount [ 600.893090][T17625] loop3: detected capacity change from 0 to 256 [ 600.946139][ T5994] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 600.958599][T17624] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 600.984663][T17624] bond0 (unregistering): Released all slaves [ 601.063765][T17625] FAT-fs (loop3): Directory bread(block 64) failed [ 601.116151][T17625] FAT-fs (loop3): Directory bread(block 65) failed [ 601.133894][T17625] FAT-fs (loop3): Directory bread(block 66) failed [ 601.162807][T17625] FAT-fs (loop3): Directory bread(block 67) failed [ 601.195287][T17625] FAT-fs (loop3): Directory bread(block 68) failed [ 601.235903][T17625] FAT-fs (loop3): Directory bread(block 69) failed [ 601.271989][T17625] FAT-fs (loop3): Directory bread(block 70) failed [ 601.309008][T17625] FAT-fs (loop3): Directory bread(block 71) failed [ 601.354679][T17625] FAT-fs (loop3): Directory bread(block 72) failed [ 601.370566][T17625] FAT-fs (loop3): Directory bread(block 73) failed [ 601.537504][T17642] loop2: detected capacity change from 0 to 64 [ 601.926689][T17656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5111'. [ 602.401005][T17674] netlink: 'syz.2.5119': attribute type 10 has an invalid length. [ 602.466743][T17674] veth1_macvtap: left promiscuous mode [ 602.514334][T17638] loop4: detected capacity change from 0 to 32768 [ 602.534790][T17638] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5103 (17638) [ 602.554887][T17678] loop0: detected capacity change from 0 to 64 [ 602.611666][T17638] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 602.645798][T17638] BTRFS info (device loop4): using sha256 checksum algorithm [ 602.755722][T17694] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 602.784260][T17694] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 602.809053][T17694] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 602.825276][T17698] loop0: detected capacity change from 0 to 1024 [ 602.843345][T17698] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 602.855399][T17694] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 602.869345][T17638] BTRFS info (device loop4): enabling ssd optimizations [ 602.870028][T17694] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 602.909298][T17638] BTRFS info (device loop4): turning on async discard [ 602.927519][T17638] BTRFS info (device loop4): enabling free space tree [ 602.943565][T17694] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 602.975010][T17694] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 603.004540][T17694] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 603.031536][T17694] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 603.472451][T17667] loop1: detected capacity change from 0 to 40427 [ 603.512698][T17667] F2FS-fs (loop1): invalid crc value [ 603.719097][T17667] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 603.814978][T17667] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 603.937426][T17721] netlink: 'syz.3.5134': attribute type 1 has an invalid length. [ 603.953671][T17719] loop5: detected capacity change from 0 to 1024 [ 603.985441][ T5990] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 604.247187][ T5981] syz-executor: attempt to access beyond end of device [ 604.247187][ T5981] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 604.338479][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 604.338512][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 604.338529][ T5981] Call Trace: [ 604.338540][ T5981] [ 604.338551][ T5981] dump_stack_lvl+0xe8/0x150 [ 604.338598][ T5981] f2fs_handle_critical_error+0x37c/0x540 [ 604.338644][ T5981] f2fs_write_end_io+0x1273/0x1740 [ 604.338696][ T5981] __submit_merged_bio+0x256/0x6a0 [ 604.338742][ T5981] __submit_merged_write_cond+0x3c9/0x4e0 [ 604.338790][ T5981] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 604.338844][ T5981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.338886][ T5981] f2fs_write_data_pages+0x287e/0x34f0 [ 604.338927][ T5981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.338959][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 604.339039][ T5981] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 604.339079][ T5981] ? check_path+0x21/0x40 [ 604.339166][ T5981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.339197][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 604.339254][ T5981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.339285][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 604.339343][ T5981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.339373][ T5981] ? do_raw_spin_lock+0x12b/0x2f0 [ 604.339414][ T5981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.339450][ T5981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.339481][ T5981] ? do_raw_spin_unlock+0xf5/0x210 [ 604.339516][ T5981] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 604.339560][ T5981] do_writepages+0x32e/0x550 [ 604.339603][ T5981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.339636][ T5981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.339671][ T5981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.339702][ T5981] ? do_raw_spin_unlock+0xf5/0x210 [ 604.339742][ T5981] filemap_fdatawrite+0x1e9/0x2f0 [ 604.339787][ T5981] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 604.339871][ T5981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.339905][ T5981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.339941][ T5981] ? do_raw_spin_unlock+0xf5/0x210 [ 604.339980][ T5981] f2fs_sync_dirty_inodes+0x30e/0x830 [ 604.340043][ T5981] f2fs_write_checkpoint+0x9df/0x26a0 [ 604.340071][ T5981] ? __lock_acquire+0x6b5/0x2cf0 [ 604.340147][ T5981] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 604.340175][ T5981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.340268][ T5981] kill_f2fs_super+0x314/0x720 [ 604.340302][ T5981] ? __pfx_kill_f2fs_super+0x10/0x10 [ 604.340349][ T5981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.340380][ T5981] ? lockdep_hardirqs_on+0x7a/0x110 [ 604.340410][ T5981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.340457][ T5981] deactivate_locked_super+0xbc/0x130 [ 604.340491][ T5981] cleanup_mnt+0x437/0x4d0 [ 604.340524][ T5981] ? _raw_spin_unlock_irq+0x23/0x50 [ 604.340556][ T5981] task_work_run+0x1d9/0x270 [ 604.340594][ T5981] ? __pfx_task_work_run+0x10/0x10 [ 604.340636][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.340667][ T5981] exit_to_user_mode_loop+0xed/0x480 [ 604.340705][ T5981] ? rcu_is_watching+0x15/0xb0 [ 604.340736][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.340765][ T5981] do_syscall_64+0x33e/0xf80 [ 604.340796][ T5981] ? trace_irq_disable+0x3b/0x140 [ 604.340838][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.340864][ T5981] RIP: 0033:0x7ff86a59da57 [ 604.340888][ T5981] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 604.340911][ T5981] RSP: 002b:00007ffd103479b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 604.340937][ T5981] RAX: 0000000000000000 RBX: 00007ff86a632048 RCX: 00007ff86a59da57 [ 604.340956][ T5981] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd10347a70 [ 604.340973][ T5981] RBP: 00007ffd10347a70 R08: 00007ffd10348a70 R09: 00000000ffffffff [ 604.340992][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd10348b00 [ 604.341009][ T5981] R13: 00007ff86a632048 R14: 000000000009025e R15: 00007ffd10348b40 [ 604.341049][ T5981] [ 604.344344][ T5981] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 604.810404][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 604.810426][ T30] audit: type=1326 audit(1777315474.397:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17739 comm="syz.2.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 604.889130][ T30] audit: type=1326 audit(1777315474.416:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17739 comm="syz.2.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 604.997638][ T30] audit: type=1326 audit(1777315474.425:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17739 comm="syz.2.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 605.038352][ T6138] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 605.105771][ T30] audit: type=1326 audit(1777315474.425:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17739 comm="syz.2.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 605.153650][ T30] audit: type=1326 audit(1777315474.425:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17739 comm="syz.2.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92059c819 code=0x7ffc0000 [ 605.234057][ T6138] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 605.251962][ T6138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.336685][ T6138] usb 4-1: selecting invalid altsetting 3 [ 605.354001][ T6138] comedi comedi4: could not set alternate setting 3 in high speed [ 605.376141][ T6138] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 605.409809][ T6138] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22 [ 605.450494][T17755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5151'. [ 605.458190][T17756] loop5: detected capacity change from 0 to 16 [ 605.521775][ T6138] usb 4-1: USB disconnect, device number 97 [ 605.555190][T17756] erofs (device loop5): mounted with root inode @ nid 36. [ 605.589066][T17756] syz.5.5150: attempt to access beyond end of device [ 605.589066][T17756] loop5: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 605.653310][T17756] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 605.704288][T17756] erofs (device loop5): read error -117 @ 0 of nid 89 [ 605.736529][ T30] audit: type=1800 audit(1777315475.267:105): pid=17756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5150" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 605.963478][T17774] netlink: 'syz.1.5158': attribute type 4 has an invalid length. [ 606.157632][T17773] loop5: detected capacity change from 0 to 4096 [ 606.204859][T17773] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 606.297854][T17773] ntfs3(loop5): ino=19, mi_enum_attr [ 606.319920][T17773] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 606.368706][T17789] loop0: detected capacity change from 0 to 512 [ 606.417960][T17789] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 606.451249][T17789] System zones: 1-12 [ 606.485366][T17789] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.5165: Directory hole found for htree index block 0 [ 606.595920][T17789] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 606.596389][T17789] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 606.605509][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 606.605532][ C0] EXT4-fs (loop0): initial error at time 1777315476: dx_probe:791: inode 2 [ 606.605570][ C0] EXT4-fs (loop0): last error at time 1777315476: dx_probe:791: inode 2 [ 606.703929][T17789] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.5165: Directory hole found for htree index block 0 [ 606.730509][ T2358] pvrusb2: request_firmware fatal error with code=-110 [ 606.767981][ T2358] pvrusb2: Failure uploading firmware1 [ 606.795915][ T2358] pvrusb2: Device initialization was not successful. [ 606.809822][T17789] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 606.810301][T17789] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 606.835380][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 606.850147][T17789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.869520][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 606.916255][ T801] pvrusb2: Device being rendered inoperable [ 607.024163][T17805] netlink: 'syz.2.5173': attribute type 8 has an invalid length. [ 607.044655][T17789] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.5165: Directory hole found for htree index block 0 [ 607.319904][ T5982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.951134][T17846] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma? [ 608.200273][T17859] loop4: detected capacity change from 0 to 8 [ 608.271865][T17859] SQUASHFS error: lzo decompression failed, data probably corrupt [ 608.340559][T17859] SQUASHFS error: Failed to read block 0x0: -5 [ 608.380089][T17859] SQUASHFS error: lzo decompression failed, data probably corrupt [ 608.426156][T17859] SQUASHFS error: Failed to read block 0x0: -5 [ 608.433512][T17869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5201'. [ 608.450316][ T30] audit: type=1800 audit(1777315477.793:106): pid=17859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5198" name="file2" dev="loop4" ino=3 res=0 errno=0 [ 608.655181][T17878] loop1: detected capacity change from 0 to 4096 [ 608.773399][T17870] bond2: option xmit_hash_policy: invalid value (14) [ 608.794987][T17878] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 608.826916][T17870] bond2 (unregistering): Released all slaves [ 608.857602][T17878] ntfs3(loop1): Failed to load $Extend (-22). [ 608.890525][T17878] ntfs3(loop1): Failed to initialize $Extend. [ 609.444010][T17902] loop3: detected capacity change from 0 to 2048 [ 609.503617][T17902] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 610.302304][T17888] loop0: detected capacity change from 0 to 32768 [ 610.349847][T17888] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 610.473835][T17937] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 610.593639][T17888] XFS (loop0): Ending clean mount [ 610.657441][T17916] loop2: detected capacity change from 0 to 32768 [ 610.869338][ T5982] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 610.914595][T17948] loop1: detected capacity change from 0 to 1024 [ 611.315529][T17960] loop3: detected capacity change from 0 to 256 [ 611.350184][T17960] exfat: Deprecated parameter 'utf8' [ 611.455198][T17960] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 611.575369][ T30] audit: type=1800 audit(1777315480.730:107): pid=17960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5240" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=1048693 res=0 errno=0 [ 611.872349][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5246'. [ 612.216203][T17952] loop5: detected capacity change from 0 to 32768 [ 612.238740][T17986] netlink: 'syz.1.5252': attribute type 1 has an invalid length. [ 612.269254][T17986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5252'. [ 612.312232][T17986] netlink: 'syz.1.5252': attribute type 1 has an invalid length. [ 612.518031][T17988] bond1: entered promiscuous mode [ 612.537252][T17988] bond1: entered allmulticast mode [ 612.552320][T17988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.743529][ T6138] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 612.940806][ T6138] usb 4-1: Using ep0 maxpacket: 8 [ 612.955761][ T6138] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 612.982789][ T6138] usb 4-1: config 0 has no interface number 0 [ 613.004562][ T6138] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 613.054592][ T6138] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 613.097179][ T6138] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 613.137444][ T6138] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 613.178270][ T6138] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 613.238472][ T6138] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 613.263150][ T6138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.306688][ T6138] usb 4-1: config 0 descriptor?? [ 613.358177][T18019] loop1: detected capacity change from 0 to 1024 [ 613.370226][ T6138] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 613.388469][T18021] netlink: 'syz.0.5270': attribute type 33 has an invalid length. [ 613.393317][T18019] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 613.409443][T18021] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5270'. [ 613.624019][T17993] ldusb 4-1:0.55: Couldn't submit interrupt_in_urb -90 [ 613.650262][ T6138] usb 4-1: USB disconnect, device number 98 [ 613.681774][ T6138] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 613.767402][T18001] loop2: detected capacity change from 0 to 32768 [ 613.791923][T18001] (syz.2.5262,18001,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 613.831983][T18001] (syz.2.5262,18001,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 613.966412][T18001] JBD2: Ignoring recovery information on journal [ 614.183329][T18001] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 614.577926][ T5986] ocfs2: Unmounting device (7,2) on (node local) [ 614.864889][T18068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5292'. [ 614.931116][ T81] [ 614.933490][ T81] ====================================================== [ 614.940762][ T81] WARNING: possible circular locking dependency detected [ 614.947779][ T81] syzkaller #0 Not tainted [ 614.952186][ T81] ------------------------------------------------------ [ 614.959196][ T81] kworker/u8:5/81 is trying to acquire lock: [ 614.965172][ T81] ffff888035d90938 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a9/0x280 [ 614.974792][ T81] [ 614.974792][ T81] but task is already holding lock: [ 614.982163][ T81] ffff888035d92c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 614.992286][ T81] [ 614.992286][ T81] which lock already depends on the new lock. [ 614.992286][ T81] [ 615.002687][ T81] [ 615.002687][ T81] the existing dependency chain (in reverse order) is: [ 615.011696][ T81] [ 615.011696][ T81] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 615.020149][ T81] percpu_down_read_internal+0x48/0x1c0 [ 615.026257][ T81] ext4_writepages+0x205/0x3b0 [ 615.031547][ T81] do_writepages+0x32e/0x550 [ 615.036675][ T81] __writeback_single_inode+0x133/0x10e0 [ 615.042833][ T81] writeback_single_inode+0x4ac/0xdc0 [ 615.048738][ T81] write_inode_now+0x1c2/0x290 [ 615.054022][ T81] iput+0x8c1/0xe80 [ 615.058384][ T81] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 615.064281][ T81] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 615.070698][ T81] __ext4_expand_extra_isize+0x30d/0x400 [ 615.076854][ T81] __ext4_mark_inode_dirty+0x45c/0x710 [ 615.082827][ T81] ext4_evict_inode+0x986/0x10e0 [ 615.088369][ T81] evict+0x61e/0xb10 [ 615.092815][ T81] ext4_orphan_cleanup+0xc38/0x1470 [ 615.098529][ T81] ext4_fill_super+0x5a19/0x6330 [ 615.103981][ T81] get_tree_bdev_flags+0x431/0x4f0 [ 615.109608][ T81] vfs_get_tree+0x92/0x2a0 [ 615.114541][ T81] do_new_mount+0x341/0xd30 [ 615.119552][ T81] __se_sys_mount+0x31d/0x420 [ 615.124740][ T81] do_syscall_64+0x15f/0xf80 [ 615.129892][ T81] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.136299][ T81] [ 615.136299][ T81] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 615.143860][ T81] down_read+0x47/0x2e0 [ 615.148541][ T81] ext4_setattr+0x884/0x1d60 [ 615.153665][ T81] notify_change+0xc1a/0xf40 [ 615.158778][ T81] chown_common+0x466/0x6b0 [ 615.163805][ T81] do_fchownat+0x14c/0x250 [ 615.168743][ T81] __x64_sys_chown+0x82/0xa0 [ 615.173916][ T81] do_syscall_64+0x15f/0xf80 [ 615.179022][ T81] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.185424][ T81] [ 615.185424][ T81] -> #0 (jbd2_handle){++++}-{0:0}: [ 615.192723][ T81] __lock_acquire+0x15a5/0x2cf0 [ 615.198105][ T81] lock_acquire+0x106/0x350 [ 615.203132][ T81] wait_transaction_locked+0x1c2/0x280 [ 615.209119][ T81] start_this_handle+0x7dc/0x2290 [ 615.214662][ T81] jbd2__journal_start+0x2c0/0x5c0 [ 615.220293][ T81] __ext4_journal_start_sb+0x203/0x5d0 [ 615.226277][ T81] ext4_do_writepages+0xf76/0x4670 [ 615.231917][ T81] ext4_writepages+0x241/0x3b0 [ 615.237193][ T81] do_writepages+0x32e/0x550 [ 615.242306][ T81] __writeback_single_inode+0x133/0x10e0 [ 615.248534][ T81] writeback_sb_inodes+0x979/0x19d0 [ 615.254257][ T81] __writeback_inodes_wb+0x111/0x240 [ 615.260065][ T81] wb_writeback+0x459/0xb00 [ 615.265793][ T81] wb_workfn+0xb12/0xf10 [ 615.270595][ T81] process_scheduled_works+0xb5d/0x1860 [ 615.276662][ T81] worker_thread+0xa53/0xfc0 [ 615.281776][ T81] kthread+0x388/0x470 [ 615.286359][ T81] ret_from_fork+0x514/0xb70 [ 615.291469][ T81] ret_from_fork_asm+0x1a/0x30 [ 615.296749][ T81] [ 615.296749][ T81] other info that might help us debug this: [ 615.296749][ T81] [ 615.306961][ T81] Chain exists of: [ 615.306961][ T81] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 615.306961][ T81] [ 615.320353][ T81] Possible unsafe locking scenario: [ 615.320353][ T81] [ 615.327788][ T81] CPU0 CPU1 [ 615.333133][ T81] ---- ---- [ 615.338478][ T81] rlock(&sbi->s_writepages_rwsem); [ 615.343753][ T81] lock(&ei->xattr_sem); [ 615.350594][ T81] lock(&sbi->s_writepages_rwsem); [ 615.358302][ T81] lock(jbd2_handle); [ 615.362361][ T81] [ 615.362361][ T81] *** DEADLOCK *** [ 615.362361][ T81] [ 615.370489][ T81] 4 locks held by kworker/u8:5/81: [ 615.375584][ T81] #0: ffff888020290140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 615.386832][ T81] #1: ffffc9000200fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 615.399587][ T81] #2: ffff888035d940d8 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 615.410145][ T81] #3: ffff888035d92c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 615.420601][ T81] [ 615.420601][ T81] stack backtrace: [ 615.426477][ T81] CPU: 1 UID: 0 PID: 81 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 615.426503][ T81] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 615.426519][ T81] Workqueue: writeback wb_workfn (flush-8:0) [ 615.426559][ T81] Call Trace: [ 615.426568][ T81] [ 615.426579][ T81] dump_stack_lvl+0xe8/0x150 [ 615.426615][ T81] print_circular_bug+0x2e1/0x300 [ 615.426645][ T81] check_noncircular+0x12e/0x150 [ 615.426674][ T81] __lock_acquire+0x15a5/0x2cf0 [ 615.426716][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.426744][ T81] ? do_raw_spin_lock+0x12b/0x2f0 [ 615.426771][ T81] ? lock_acquire+0x106/0x350 [ 615.426809][ T81] ? wait_transaction_locked+0x1a9/0x280 [ 615.426845][ T81] lock_acquire+0x106/0x350 [ 615.426878][ T81] ? wait_transaction_locked+0x1a9/0x280 [ 615.426916][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.426946][ T81] ? wait_transaction_locked+0x1a9/0x280 [ 615.426983][ T81] wait_transaction_locked+0x1c2/0x280 [ 615.427018][ T81] ? wait_transaction_locked+0x1a9/0x280 [ 615.427055][ T81] ? __pfx_wait_transaction_locked+0x10/0x10 [ 615.427092][ T81] ? __pfx_autoremove_wake_function+0x10/0x10 [ 615.427126][ T81] ? __pfx_stack_trace_save+0x10/0x10 [ 615.427156][ T81] ? jbd2__journal_start+0x1db/0x5c0 [ 615.427188][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.427218][ T81] start_this_handle+0x7dc/0x2290 [ 615.427249][ T81] ? kasan_save_track+0x3e/0x80 [ 615.427281][ T81] ? ret_from_fork_asm+0x1a/0x30 [ 615.427312][ T81] ? __pfx_start_this_handle+0x10/0x10 [ 615.427352][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.427378][ T81] ? rcu_is_watching+0x15/0xb0 [ 615.427401][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.427427][ T81] ? trace_kmem_cache_alloc+0x29/0xe0 [ 615.427453][ T81] ? jbd2__journal_start+0x1db/0x5c0 [ 615.427484][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.427510][ T81] ? kmem_cache_alloc_noprof+0x307/0x650 [ 615.427535][ T81] ? jbd2__journal_start+0x1db/0x5c0 [ 615.427570][ T81] jbd2__journal_start+0x2c0/0x5c0 [ 615.427604][ T81] __ext4_journal_start_sb+0x203/0x5d0 [ 615.427643][ T81] ext4_do_writepages+0xf76/0x4670 [ 615.427699][ T81] ? __pfx_ext4_do_writepages+0x10/0x10 [ 615.427744][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.427771][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.427802][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.427830][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.427859][ T81] ext4_writepages+0x241/0x3b0 [ 615.427884][ T81] ? __pfx_ext4_writepages+0x10/0x10 [ 615.427912][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.427940][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.427967][ T81] ? do_raw_spin_unlock+0xf5/0x210 [ 615.427996][ T81] ? __pfx_ext4_writepages+0x10/0x10 [ 615.428020][ T81] do_writepages+0x32e/0x550 [ 615.428056][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.428083][ T81] ? reacquire_held_locks+0x104/0x190 [ 615.428113][ T81] ? writeback_sb_inodes+0x463/0x19d0 [ 615.428152][ T81] __writeback_single_inode+0x133/0x10e0 [ 615.428175][ T81] ? do_raw_spin_unlock+0xf5/0x210 [ 615.428206][ T81] writeback_sb_inodes+0x979/0x19d0 [ 615.428257][ T81] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 615.428311][ T81] ? __pfx_down_read_trylock+0x10/0x10 [ 615.428339][ T81] ? __pfx_move_expired_inodes+0x10/0x10 [ 615.428363][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.428392][ T81] __writeback_inodes_wb+0x111/0x240 [ 615.428432][ T81] wb_writeback+0x459/0xb00 [ 615.428470][ T81] ? queue_io+0x221/0x470 [ 615.428507][ T81] ? __pfx_wb_writeback+0x10/0x10 [ 615.428540][ T81] ? do_raw_spin_lock+0x12b/0x2f0 [ 615.428576][ T81] wb_workfn+0xb12/0xf10 [ 615.428604][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.428631][ T81] ? look_up_lock_class+0x57/0x110 [ 615.428667][ T81] ? __pfx_wb_workfn+0x10/0x10 [ 615.428695][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.428723][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.428751][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.428777][ T81] ? do_raw_spin_unlock+0xf5/0x210 [ 615.428808][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.428836][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.428865][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.428893][ T81] ? process_scheduled_works+0xa70/0x1860 [ 615.428926][ T81] ? process_scheduled_works+0xa70/0x1860 [ 615.428961][ T81] process_scheduled_works+0xb5d/0x1860 [ 615.428994][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.429036][ T81] ? __pfx_process_scheduled_works+0x10/0x10 [ 615.429072][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.429098][ T81] ? assign_work+0x3d5/0x5e0 [ 615.429137][ T81] worker_thread+0xa53/0xfc0 [ 615.429180][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.429211][ T81] kthread+0x388/0x470 [ 615.429236][ T81] ? __pfx_worker_thread+0x10/0x10 [ 615.429269][ T81] ? __pfx_kthread+0x10/0x10 [ 615.429294][ T81] ret_from_fork+0x514/0xb70 [ 615.429330][ T81] ? __pfx_ret_from_fork+0x10/0x10 [ 615.429364][ T81] ? srso_alias_return_thunk+0x5/0xfbef5 [ 615.429391][ T81] ? __switch_to+0xc79/0x1410 [ 615.429421][ T81] ? __pfx_kthread+0x10/0x10 [ 615.429446][ T81] ret_from_fork_asm+0x1a/0x30 [ 615.429478][ T81] [ 615.970743][T18055] loop4: detected capacity change from 0 to 32768 [ 615.981726][T18071] netlink: 'syz.5.5293': attribute type 10 has an invalid length. [ 615.988718][T18048] loop0: detected capacity change from 0 to 32768 [ 616.007883][T18071] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 616.040507][T18071] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 616.053836][T18071] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 616.094023][T18048] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 616.169821][ T5982] ocfs2: Unmounting device (7,0) on (node local)