last executing test programs: 3.511894495s ago: executing program 2 (id=2069): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f7680009050100000401ff07090502"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.629911828s ago: executing program 1 (id=2085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x44, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x100) 2.50047748s ago: executing program 1 (id=2088): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 2.302971264s ago: executing program 1 (id=2092): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCRMFF(r0, 0x40004580, 0x0) 2.066520557s ago: executing program 1 (id=2096): r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0x3) 1.999149108s ago: executing program 1 (id=2098): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x2, 0x5, {0xffffffffffffffff, @struct={0xfffffffd}, 0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffffffffffb, 0x0, @struct={0x0, 0xce82}, 0x4000, 0x3, [0x32, 0x8, 0x1000000000]}, {0xfffffffffffffffe, @usage=0x400, 0x0, 0xfffffffffffffffb, 0x1, 0x0, 0x4, 0x8, 0x58a, @struct={0x2, 0xf136}, 0x3, 0x4, [0x4, 0x1, 0x2, 0x80000000, 0x0, 0x1]}, {0x6, @usage=0x7, 0x0, 0x7, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x8, 0xe4ae66913924f716, @struct={0x0, 0x106}, 0xffffffef, 0x4, [0x80000000, 0x800006, 0x6532, 0x3ff, 0x80]}}) 1.87813067s ago: executing program 4 (id=2100): setrlimit(0x2, &(0x7f0000000040)={0x0, 0x2400000}) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) 1.748192372s ago: executing program 4 (id=2102): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000400)) 1.611903114s ago: executing program 2 (id=2105): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffaecd, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) 1.542549785s ago: executing program 4 (id=2106): r0 = openat$sequencer(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0046d00, &(0x7f0000001500)) 1.522083076s ago: executing program 3 (id=2107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 1.374485228s ago: executing program 4 (id=2109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 1.369462978s ago: executing program 2 (id=2110): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f00000000c0), &(0x7f0000000040)=0x4) 1.349976678s ago: executing program 3 (id=2111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'geneve1\x00'}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}]}, 0x40}}, 0x0) 1.206463391s ago: executing program 0 (id=2112): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) 1.173098751s ago: executing program 4 (id=2113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) 1.105865212s ago: executing program 3 (id=2114): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0xf5cfd0ed62d9e836, 0xffffffffffffffff, 0x2000) 1.105383972s ago: executing program 2 (id=2124): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x8, 0x0, &(0x7f0000bbdffc)) 1.010480033s ago: executing program 0 (id=2115): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 949.952725ms ago: executing program 4 (id=2116): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x4, 0x2, 0xffff, 0x3, 0x1, 0x6, 0x0, 0x36a, 0x1020003f}) 922.964515ms ago: executing program 2 (id=2117): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000300)=[{&(0x7f0000004580)="3900000013000b4700bb65e1c3e4ffff0100000035000000560000022500000019000a00101000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0x1) 873.916846ms ago: executing program 3 (id=2118): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 803.355107ms ago: executing program 0 (id=2119): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x80405600, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) 750.453658ms ago: executing program 2 (id=2120): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 580.05052ms ago: executing program 0 (id=2121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0x0, 0x3, 0x7ff, 0x9}, 0x20) 561.886041ms ago: executing program 3 (id=2122): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x24, 0x9, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 296.625965ms ago: executing program 0 (id=2123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2f) 296.035695ms ago: executing program 3 (id=2125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xb}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x13}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) 160.117957ms ago: executing program 1 (id=2126): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='source', &(0x7f0000000280)='%(,c\xbeJ\xdb.\an\x1c\x80OxX\x0e\x7f\xa7\x00', 0x0) 0s ago: executing program 0 (id=2127): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) read$sequencer(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): NILFS (loop3): error -5 truncating bmap (ino=16) [ 74.297310][ T4263] ocfs2: Unmounting device (7,2) on (node local) [ 74.309640][ T4254] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 74.393295][ T4662] trusted_key: encrypted_key: insufficient parameters specified [ 74.497244][ T4668] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.141'. [ 74.992758][ T4691] loop1: detected capacity change from 0 to 128 [ 75.234890][ T4256] sysv_free_block: flc_count > flc_size [ 75.240934][ T4256] sysv_free_block: flc_count > flc_size [ 75.253103][ T4256] sysv_free_block: flc_count > flc_size [ 75.258685][ T4256] sysv_free_block: flc_count > flc_size [ 75.282340][ T4256] sysv_free_block: flc_count > flc_size [ 75.292462][ T4256] sysv_free_block: flc_count > flc_size [ 75.334311][ T4256] sysv_free_block: flc_count > flc_size [ 75.339913][ T4256] sysv_free_block: flc_count > flc_size [ 75.365938][ T4256] sysv_free_block: flc_count > flc_size [ 75.371532][ T4256] sysv_free_block: flc_count > flc_size [ 75.398960][ T4256] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 75.493201][ T4712] tc_dump_action: action bad kind [ 75.611810][ T4721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.168'. [ 75.643006][ T4721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.168'. [ 75.671736][ T4717] syz.4.166 (4717) used greatest stack depth: 20648 bytes left [ 75.896258][ T4732] loop4: detected capacity change from 0 to 128 [ 75.995872][ T4732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 76.109944][ T4732] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.354449][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 76.355396][ T126] cfg80211: failed to load regulatory.db [ 76.393188][ T4748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.462168][ T4752] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.727374][ T4761] loop4: detected capacity change from 0 to 1024 [ 77.025597][ T4777] loop2: detected capacity change from 0 to 64 [ 77.283662][ T4784] netlink: 'syz.4.197': attribute type 1 has an invalid length. [ 77.361850][ T4787] loop2: detected capacity change from 0 to 128 [ 77.410236][ T4787] ======================================================= [ 77.410236][ T4787] WARNING: The mand mount option has been deprecated and [ 77.410236][ T4787] and is ignored by this kernel. Remove the mand [ 77.410236][ T4787] option from the mount to silence this warning. [ 77.410236][ T4787] ======================================================= [ 77.640024][ T4797] loop0: detected capacity change from 0 to 256 [ 77.779588][ T4797] FAT-fs (loop0): Directory bread(block 64) failed [ 77.813104][ T4797] FAT-fs (loop0): Directory bread(block 65) failed [ 77.844224][ T4797] FAT-fs (loop0): Directory bread(block 66) failed [ 77.903210][ T4797] FAT-fs (loop0): Directory bread(block 67) failed [ 77.908034][ T4787] EXT4-fs (loop2): Test dummy encryption mode enabled [ 77.914929][ T4797] FAT-fs (loop0): Directory bread(block 68) failed [ 77.932904][ T4797] FAT-fs (loop0): Directory bread(block 69) failed [ 77.939474][ T4807] loop1: detected capacity change from 0 to 512 [ 77.939675][ T4797] FAT-fs (loop0): Directory bread(block 70) failed [ 77.962320][ T4787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 77.981793][ T4787] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.994354][ T4797] FAT-fs (loop0): Directory bread(block 71) failed [ 78.000987][ T4797] FAT-fs (loop0): Directory bread(block 72) failed [ 78.004764][ T4807] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.007677][ T4797] FAT-fs (loop0): Directory bread(block 73) failed [ 78.140785][ T4807] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 78.202605][ T4807] EXT4-fs (loop1): 1 truncate cleaned up [ 78.223957][ T4807] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.245299][ T4807] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:300: inode #15: comm syz.1.206: verity file has no extents [ 78.278997][ T4807] EXT4-fs (loop1): Remounting filesystem read-only [ 78.285869][ T4807] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 78.493366][ T4256] EXT4-fs (loop1): unmounting filesystem. [ 78.564060][ T4785] loop3: detected capacity change from 0 to 40427 [ 78.613080][ T4785] F2FS-fs (loop3): Wrong segment_count / block_count (64 > 16384) [ 78.645900][ T4785] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 78.645996][ T26] audit: type=1326 audit(1751305964.400:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4824 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653178e929 code=0x7ffc0000 [ 78.705691][ T4787] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 78.717828][ T4785] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.718758][ T4787] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.198: bg 0: bad block bitmap checksum [ 78.768043][ T26] audit: type=1326 audit(1751305964.410:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4824 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f653178e929 code=0x7ffc0000 [ 78.883676][ T26] audit: type=1326 audit(1751305964.410:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4824 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653178e929 code=0x7ffc0000 [ 78.955531][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 78.967181][ T26] audit: type=1326 audit(1751305964.410:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4824 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653178e929 code=0x7ffc0000 [ 78.991374][ T4785] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 79.079400][ T4785] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 79.081963][ T4841] netlink: 'syz.1.217': attribute type 3 has an invalid length. [ 79.165425][ T4841] netlink: 216 bytes leftover after parsing attributes in process `syz.1.217'. [ 79.378006][ T4254] syz-executor: attempt to access beyond end of device [ 79.378006][ T4254] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 79.611215][ T4860] loop0: detected capacity change from 0 to 1764 [ 80.432147][ T4893] loop1: detected capacity change from 0 to 4096 [ 80.438668][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.460687][ T4893] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 80.693663][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 80.705896][ T22] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 80.745381][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.791748][ T22] usb 1-1: config 0 descriptor?? [ 80.999564][ T22] usb 1-1: string descriptor 0 read error: -71 [ 81.028051][ T22] usb 1-1: Found UVC 0.00 device (2833:0201) [ 81.059952][ T22] usb 1-1: No valid video chain found. [ 81.109268][ T22] usb 1-1: USB disconnect, device number 2 [ 81.159899][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 81.487332][ T4929] loop4: detected capacity change from 0 to 4096 [ 81.500573][ T4929] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 81.643203][ T4929] ntfs3: loop4: failed to convert "c46c" to macgaelic [ 81.725306][ T4937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'. [ 81.940981][ T4946] loop2: detected capacity change from 0 to 164 [ 82.179695][ T4956] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 82.396420][ T4967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'. [ 82.654364][ T4981] loop1: detected capacity change from 0 to 8 [ 82.792946][ T4981] SQUASHFS error: lzo decompression failed, data probably corrupt [ 82.800995][ T4981] SQUASHFS error: Failed to read block 0x1c0: -5 [ 82.819101][ T4985] ufs: You didn't specify the type of your ufs filesystem [ 82.819101][ T4985] [ 82.819101][ T4985] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 82.819101][ T4985] [ 82.819101][ T4985] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 82.869373][ T4981] SQUASHFS error: Unable to read metadata cache entry [1be] [ 82.886955][ T4985] ufs: ufstype=old is supported read-only [ 82.888758][ T4989] loop3: detected capacity change from 0 to 512 [ 82.895238][ T4985] ufs: ufs_fill_super(): bad magic number [ 82.924202][ T4991] netlink: 'syz.0.291': attribute type 1 has an invalid length. [ 83.070501][ T4998] program syz.1.294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.082695][ T4989] EXT4-fs (loop3): 1 orphan inode deleted [ 83.093251][ T4989] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 83.112596][ T4989] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.133949][ T4346] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 83.163139][ T4346] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:6: Failed to release dquot type 1 [ 83.227507][ T26] audit: type=1326 audit(1751305968.980:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4999 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739bf8e929 code=0x7ffc0000 [ 83.272450][ T4989] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 83.289594][ T26] audit: type=1326 audit(1751305969.010:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4999 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f739bf8e929 code=0x7ffc0000 [ 83.311725][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.393699][ T26] audit: type=1326 audit(1751305969.010:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4999 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739bf8e929 code=0x7ffc0000 [ 83.436963][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 83.492566][ T26] audit: type=1326 audit(1751305969.010:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4999 comm="syz.4.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739bf8e929 code=0x7ffc0000 [ 83.597309][ T5015] xt_TCPMSS: Only works on TCP SYN packets [ 83.843672][ T5030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.309'. [ 84.038160][ T5026] loop3: detected capacity change from 0 to 8192 [ 84.055345][ T5038] device netdevsim0 entered promiscuous mode [ 84.068211][ T5026] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 84.068285][ T5026] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 84.068416][ T5026] REISERFS (device loop3): using ordered data mode [ 84.068425][ T5026] reiserfs: using flush barriers [ 84.072106][ T5026] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.072743][ T5026] REISERFS (device loop3): checking transaction log (loop3) [ 84.364659][ T5026] REISERFS (device loop3): Using tea hash to sort names [ 84.388032][ T5026] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 84.614289][ T5055] loop1: detected capacity change from 0 to 1764 [ 84.646475][ T5059] loop2: detected capacity change from 0 to 1024 [ 84.678341][ T5059] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #3: block 1: comm syz.2.323: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.700421][ T5059] Quota error (device loop2): write_blk: dquota write failed [ 84.749560][ T5059] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 84.783150][ T5059] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.323: Failed to acquire dquot type 0 [ 84.816452][ T5059] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.323: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.845497][ T5066] loop1: detected capacity change from 0 to 8 [ 84.851947][ T5059] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.323: Invalid inode bitmap blk 0 in block_group 0 [ 84.866932][ T34] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.883334][ T5059] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 84.959103][ T5059] EXT4-fs (loop2): 1 orphan inode deleted [ 84.967072][ T34] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 84.978879][ T5066] SQUASHFS error: Failed to read block 0x2d7: -5 [ 85.002169][ T34] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:2: Failed to release dquot type 0 [ 85.022899][ T5059] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.032481][ T5066] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 85.066043][ T5066] SQUASHFS error: Failed to read block 0x8f: -5 [ 85.075473][ T5068] loop0: detected capacity change from 0 to 512 [ 85.099377][ T26] audit: type=1800 audit(1751305970.850:18): pid=5066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.324" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 85.103520][ T5068] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.172870][ T5059] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 85.296336][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 85.329897][ T5068] EXT4-fs (loop0): 1 truncate cleaned up [ 85.347982][ T5068] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 85.385905][ T5071] loop3: detected capacity change from 0 to 4096 [ 85.433998][ T5071] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 85.687478][ T4259] EXT4-fs (loop0): unmounting filesystem. [ 85.841576][ T5064] loop4: detected capacity change from 0 to 32768 [ 85.971012][ T5064] [ 85.971012][ T5064] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.971012][ T5064] [ 86.210916][ T4251] [ 86.210916][ T4251] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.210916][ T4251] [ 86.258297][ T4251] [ 86.258297][ T4251] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.258297][ T4251] [ 86.474297][ T5103] loop0: detected capacity change from 0 to 8 [ 86.554797][ T5103] SQUASHFS error: Failed to read block 0x2d7: -5 [ 86.561188][ T5103] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 86.632571][ T5077] loop2: detected capacity change from 0 to 32768 [ 86.656731][ T5103] SQUASHFS error: Failed to read block 0x8f: -5 [ 86.676095][ T26] audit: type=1800 audit(1751305972.430:19): pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.340" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 86.686683][ T5077] (syz.2.331,5077,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 86.770725][ T5077] (syz.2.331,5077,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 86.950155][ T5077] JBD2: Ignoring recovery information on journal [ 87.029912][ T5077] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 87.143826][ T5077] ocfs2: Unmounting device (7,2) on (node local) [ 87.240685][ T5126] loop1: detected capacity change from 0 to 1024 [ 88.387435][ T5138] loop2: detected capacity change from 0 to 32768 [ 88.407567][ T5138] XFS: ikeep mount option is deprecated. [ 88.447179][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.528599][ T5146] loop4: detected capacity change from 0 to 32768 [ 88.548398][ T5138] XFS (loop2): Mounting V5 Filesystem [ 88.605303][ T5146] (syz.4.363,5146,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.638828][ T22] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 88.653777][ T5146] (syz.4.363,5146,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.658886][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.701069][ T5146] JBD2: Ignoring recovery information on journal [ 88.706005][ T22] usb 4-1: Product: syz [ 88.713496][ T22] usb 4-1: Manufacturer: syz [ 88.718271][ T22] usb 4-1: SerialNumber: syz [ 88.737252][ T5138] XFS (loop2): Ending clean mount [ 88.748657][ T22] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 88.779214][ T5138] XFS (loop2): Quotacheck needed: Please wait. [ 88.821304][ T5146] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 88.878787][ T22] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 88.933416][ T5138] XFS (loop2): Quotacheck: Done. [ 88.982215][ T5178] loop1: detected capacity change from 0 to 128 [ 89.095817][ T5178] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 89.119865][ T4263] XFS (loop2): Unmounting Filesystem [ 89.153629][ T4251] ocfs2: Unmounting device (7,4) on (node local) [ 89.177407][ T5178] FAT-fs (loop1): Filesystem has been set read-only [ 89.454919][ T4303] usb 4-1: USB disconnect, device number 2 [ 89.657586][ T5185] loop1: detected capacity change from 0 to 4096 [ 89.693754][ T5185] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 89.943095][ T22] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 89.955256][ T22] ath9k_htc: Failed to initialize the device [ 89.973651][ T4303] usb 4-1: ath9k_htc: USB layer deinitialized [ 90.293720][ T5212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 90.639352][ T5233] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 90.691722][ T5235] loop4: detected capacity change from 0 to 64 [ 90.998365][ T5250] loop4: detected capacity change from 0 to 1024 [ 91.058920][ T5250] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #3: block 1: comm syz.4.405: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.169107][ T5250] Quota error (device loop4): write_blk: dquota write failed [ 91.177209][ T5250] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 91.187636][ T5250] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.405: Failed to acquire dquot type 0 [ 91.209476][ T5250] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.405: Freeing blocks not in datazone - block = 0, count = 4096 [ 91.244444][ T5250] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.405: Invalid inode bitmap blk 0 in block_group 0 [ 91.263066][ T4351] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.278283][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.292358][ T5250] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 91.323208][ T4351] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 91.331485][ T5250] EXT4-fs (loop4): 1 orphan inode deleted [ 91.338135][ T5250] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.357734][ T4351] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:7: Failed to release dquot type 0 [ 91.425926][ T5250] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 91.485746][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 91.495590][ T7] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 91.532926][ T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 91.572945][ T7] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 91.592912][ T7] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 91.608983][ T5263] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.612991][ T7] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 91.640635][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.659046][ T7] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 91.683259][ T7] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 91.702040][ T7] usb 2-1: Product: syz [ 91.722272][ T7] usb 2-1: Manufacturer: syz [ 91.726985][ T7] usb 2-1: SerialNumber: syz [ 91.753975][ T7] usb 2-1: config 0 descriptor?? [ 91.762586][ T7] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 91.795852][ T7] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 91.811082][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 92.049922][ T5248] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90 [ 92.099273][ T7] usb 2-1: USB disconnect, device number 2 [ 92.118316][ T7] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 92.528418][ T5289] loop3: detected capacity change from 0 to 4096 [ 92.556022][ T5289] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 92.651206][ T5289] ntfs3: loop3: failed to convert "c46c" to macgaelic [ 92.678754][ T5298] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 93.182072][ T5321] capability: warning: `syz.1.444' uses deprecated v2 capabilities in a way that may be insecure [ 93.263437][ T5328] overlayfs: conflicting options: nfs_export=on,index=off [ 93.361907][ T5332] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.449'. [ 93.483066][ T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.704177][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 93.732359][ T22] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 93.761696][ T22] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 93.788170][ T22] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 93.807987][ T22] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 93.822995][ T22] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 93.862428][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.871430][ T22] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 93.890848][ T22] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 93.911748][ T22] usb 3-1: Product: syz [ 93.916045][ T22] usb 3-1: Manufacturer: syz [ 93.932122][ T22] usb 3-1: SerialNumber: syz [ 93.939374][ T22] usb 3-1: config 0 descriptor?? [ 93.955053][ T22] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 93.988448][ T22] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 94.197304][ T5323] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 94.233971][ T22] usb 3-1: USB disconnect, device number 2 [ 94.246467][ T22] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 95.160339][ T5389] netlink: 80 bytes leftover after parsing attributes in process `syz.2.477'. [ 95.193032][ T5367] loop4: detected capacity change from 0 to 32768 [ 95.229846][ T5367] (syz.4.466,5367,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.270886][ T5367] (syz.4.466,5367,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.353303][ T5367] JBD2: Ignoring recovery information on journal [ 95.410624][ T5396] trusted_key: encrypted_key: hex blob is missing [ 95.465338][ T5367] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 95.542298][ T5367] ocfs2: Unmounting device (7,4) on (node local) [ 96.243872][ T5402] loop1: detected capacity change from 0 to 32768 [ 96.299875][ T5402] ERROR: (device loop1): dbFindCtl: Corrupt dmapctl page [ 96.299875][ T5402] [ 96.331961][ T5402] ERROR: (device loop1): remounting filesystem as read-only [ 96.356515][ T5402] ialloc: diAlloc returned -5! [ 96.358276][ T5401] loop3: detected capacity change from 0 to 32768 [ 96.368631][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.392980][ T5421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.492'. [ 96.454055][ T5401] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 96.488290][ T5401] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 96.569525][ T5401] (syz.3.481,5401,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=64 [ 96.592944][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 96.599831][ T22] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.615613][ T22] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 96.640882][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.672546][ T22] usb 1-1: Product: syz [ 96.683764][ T22] usb 1-1: Manufacturer: syz [ 96.701812][ T22] usb 1-1: SerialNumber: syz [ 96.741870][ T5413] loop4: detected capacity change from 0 to 32768 [ 96.745208][ T22] usb 1-1: config 0 descriptor?? [ 96.779373][ T5413] XFS: ikeep mount option is deprecated. [ 96.791380][ T5401] (syz.3.481,5401,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 96.802684][ T22] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 96.835337][ T5401] (syz.3.481,5401,0):ocfs2_symlink:1864 ERROR: status = -2 [ 96.855189][ T5413] XFS (loop4): Mounting V5 Filesystem [ 96.865410][ T5401] (syz.3.481,5401,1):ocfs2_symlink:2065 ERROR: status = -2 [ 96.937964][ T4254] ocfs2: Unmounting device (7,3) on (node local) [ 96.949695][ T5413] XFS (loop4): Ending clean mount [ 96.971592][ T5413] XFS (loop4): Quotacheck needed: Please wait. [ 97.016621][ T22] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 97.029823][ T5413] XFS (loop4): Quotacheck: Done. [ 97.044782][ T22] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 97.191913][ T4251] XFS (loop4): Unmounting Filesystem [ 97.304161][ T4301] usb 1-1: USB disconnect, device number 3 [ 97.790999][ T5466] cgroup: none used incorrectly [ 98.191786][ T5486] xt_hashlimit: size too large, truncated to 1048576 [ 98.233255][ T5486] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 98.753018][ T4303] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.866554][ T5520] loop3: detected capacity change from 0 to 64 [ 98.942998][ T4303] usb 2-1: Using ep0 maxpacket: 32 [ 98.966706][ T4303] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 99.006334][ T4303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.026608][ T4303] usb 2-1: Product: syz [ 99.046796][ T4303] usb 2-1: Manufacturer: syz [ 99.051447][ T4303] usb 2-1: SerialNumber: syz [ 99.307097][ T4303] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 99.333797][ T4303] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 99.357048][ T5530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.537'. [ 99.378064][ T4303] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 99.431534][ T5532] overlayfs: workdir and upperdir must be separate subtrees [ 99.538191][ T4303] usb 2-1: USB disconnect, device number 3 [ 99.563531][ T4303] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 99.600858][ T4303] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 99.624379][ T4303] visor 2-1:1.0: device disconnected [ 99.668245][ T5517] loop2: detected capacity change from 0 to 40427 [ 99.691989][ T5517] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 99.717989][ T5517] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 99.754238][ T5517] F2FS-fs (loop2): invalid crc value [ 99.785571][ T5517] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.850187][ T5543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.542'. [ 99.897773][ T5517] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 99.917062][ T5517] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.449167][ T5568] loop1: detected capacity change from 0 to 64 [ 100.624469][ T5573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.557'. [ 100.657287][ T5574] netlink: 798 bytes leftover after parsing attributes in process `syz.0.558'. [ 100.811015][ T5577] loop1: detected capacity change from 0 to 256 [ 100.825693][ T5578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.561'. [ 100.855142][ T5578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 100.860452][ T5577] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 100.873341][ T5581] binder: 5579:5581 ioctl c018620c 200000000380 returned -22 [ 100.893276][ T5577] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 101.223176][ T4262] Bluetooth: hci0: command 0x0406 tx timeout [ 101.657452][ T5615] misc userio: The device must be registered before sending interrupts [ 102.458876][ T5656] loop2: detected capacity change from 0 to 64 [ 102.736828][ T5666] loop1: detected capacity change from 0 to 64 [ 102.927947][ T5633] loop4: detected capacity change from 0 to 32768 [ 103.047116][ T5633] XFS (loop4): Mounting V5 Filesystem [ 103.122523][ T5687] loop3: detected capacity change from 0 to 512 [ 103.183675][ T5687] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 103.191779][ T5687] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 103.239815][ T5633] XFS (loop4): Starting recovery (logdev: internal) [ 103.318334][ T5687] EXT4-fs (loop3): 1 truncate cleaned up [ 103.337589][ T5687] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.373118][ T5633] XFS (loop4): Ending recovery (logdev: internal) [ 103.425562][ T5687] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 103.569330][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 103.580713][ T5707] netlink: 180 bytes leftover after parsing attributes in process `syz.2.615'. [ 103.628164][ T4251] XFS (loop4): Unmounting Filesystem [ 103.834595][ T5717] loop3: detected capacity change from 0 to 8 [ 104.095265][ T5726] netlink: 404 bytes leftover after parsing attributes in process `syz.0.626'. [ 104.111519][ T5726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.626'. [ 104.141083][ T5726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.626'. [ 104.151861][ T5726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.626'. [ 104.163150][ T5727] netlink: 'syz.1.625': attribute type 21 has an invalid length. [ 104.171001][ T126] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.369380][ T5736] xt_TPROXY: Can be used only with -p tcp or -p udp [ 104.374961][ T126] usb 4-1: Using ep0 maxpacket: 8 [ 104.397095][ T126] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 104.427295][ T126] usb 4-1: config 0 has an invalid descriptor of length 190, skipping remainder of the config [ 104.466409][ T126] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 104.496373][ T126] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.537954][ T126] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.565042][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.595810][ T126] usb 4-1: Product: syz [ 104.606853][ T126] usb 4-1: Manufacturer: syz [ 104.631816][ T126] usb 4-1: SerialNumber: syz [ 104.641842][ T126] usb 4-1: config 0 descriptor?? [ 104.664933][ T126] cdc_ncm 4-1:0.0: skipping garbage [ 104.680348][ T126] cdc_ncm 4-1:0.0: CDC Union missing and no IAD found [ 104.702260][ T126] cdc_ncm 4-1:0.0: bind() failure [ 104.908657][ T32] usb 4-1: USB disconnect, device number 3 [ 104.952969][ T4301] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.961586][ T5754] netlink: 'syz.4.638': attribute type 1 has an invalid length. [ 105.034191][ T5739] loop1: detected capacity change from 0 to 32768 [ 105.083219][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.100921][ T5739] XFS (loop1): Mounting V5 Filesystem [ 105.153062][ T4301] usb 1-1: Using ep0 maxpacket: 32 [ 105.166576][ T4301] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 105.211398][ T4301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.243650][ T4301] usb 1-1: Product: syz [ 105.247898][ T4301] usb 1-1: Manufacturer: syz [ 105.252503][ T4301] usb 1-1: SerialNumber: syz [ 105.272952][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 105.282422][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 105.297096][ T4301] usb 1-1: config 0 descriptor?? [ 105.319013][ T5739] XFS (loop1): Ending clean mount [ 105.319654][ T22] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 105.337417][ T5739] XFS (loop1): Quotacheck needed: Please wait. [ 105.353380][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.361464][ T22] usb 3-1: Product: syz [ 105.382874][ T22] usb 3-1: Manufacturer: syz [ 105.387621][ T22] usb 3-1: SerialNumber: syz [ 105.395371][ T22] usb 3-1: config 0 descriptor?? [ 105.410638][ T22] hub 3-1:0.0: bad descriptor, ignoring hub [ 105.433270][ T22] hub: probe of 3-1:0.0 failed with error -5 [ 105.443053][ T5739] XFS (loop1): Quotacheck: Done. [ 105.458325][ T22] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 105.631010][ T4256] XFS (loop1): Unmounting Filesystem [ 105.721833][ T4301] airspy 1-1:0.0: usb_control_msg() failed -71 request 0a [ 105.738462][ T4301] airspy 1-1:0.0: Could not detect board [ 105.752781][ T4301] airspy: probe of 1-1:0.0 failed with error -71 [ 105.779722][ T4301] usb 1-1: USB disconnect, device number 4 [ 105.989844][ T32] usb 3-1: USB disconnect, device number 3 [ 106.322773][ T5801] ip6t_REJECT: ECHOREPLY is not supported [ 106.453020][ T5807] netlink: 'syz.1.660': attribute type 5 has an invalid length. [ 106.617252][ T26] audit: type=1326 audit(1751305992.370:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 106.642433][ T5814] netlink: 'syz.0.662': attribute type 16 has an invalid length. [ 106.660391][ T26] audit: type=1326 audit(1751305992.390:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 106.682384][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.694140][ T5814] netlink: 'syz.0.662': attribute type 17 has an invalid length. [ 106.749027][ T26] audit: type=1326 audit(1751305992.390:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 106.788235][ T26] audit: type=1326 audit(1751305992.390:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5810 comm="syz.2.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 106.797136][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.876318][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.913144][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.961370][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.153671][ T5833] loop4: detected capacity change from 0 to 1024 [ 107.162960][ T5835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.674'. [ 107.258852][ T5833] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.302769][ T5844] --map-set only usable from mangle table [ 107.491697][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 107.970068][ T5877] loop4: detected capacity change from 0 to 64 [ 108.489009][ T5898] loop2: detected capacity change from 0 to 4096 [ 109.344420][ T5940] loop2: detected capacity change from 0 to 65 [ 109.409203][ T5940] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 109.454176][ T26] audit: type=1326 audit(1751305995.210:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653178e929 code=0x7ffc0000 [ 109.563880][ T26] audit: type=1326 audit(1751305995.210:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653178e929 code=0x7ffc0000 [ 109.586961][ T26] audit: type=1326 audit(1751305995.230:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f653178e929 code=0x7ffc0000 [ 109.609667][ T26] audit: type=1326 audit(1751305995.230:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653178e929 code=0x7ffc0000 [ 109.632945][ T26] audit: type=1326 audit(1751305995.230:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653178e929 code=0x7ffc0000 [ 109.676738][ T5910] loop3: detected capacity change from 0 to 32768 [ 109.717193][ T5948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.729'. [ 109.775917][ T5910] (syz.3.710,5910,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 109.862516][ T5910] (syz.3.710,5910,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 109.942595][ T5910] (syz.3.710,5910,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 109.992471][ T5910] JBD2: Ignoring recovery information on journal [ 110.162215][ T5910] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 110.392246][ T5971] loop4: detected capacity change from 0 to 256 [ 110.522399][ T4254] ocfs2: Unmounting device (7,3) on (node local) [ 110.927258][ T26] audit: type=1326 audit(1751305996.680:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935738e929 code=0x7ffc0000 [ 111.219685][ T5998] loop4: detected capacity change from 0 to 1764 [ 111.311924][ T5998] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 111.369274][ T6005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.754'. [ 111.423517][ T6005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.754'. [ 112.112942][ T4303] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.292919][ T4303] usb 2-1: Using ep0 maxpacket: 16 [ 112.301802][ T4303] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 112.341458][ T4303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.369342][ T4303] usb 2-1: Product: syz [ 112.388832][ T4303] usb 2-1: Manufacturer: syz [ 112.393554][ T4303] usb 2-1: SerialNumber: syz [ 112.432190][ T4303] usb 2-1: config 0 descriptor?? [ 112.456921][ T4303] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 112.476210][ T6041] netlink: 'syz.2.773': attribute type 16 has an invalid length. [ 112.501215][ T6041] netlink: 'syz.2.773': attribute type 17 has an invalid length. [ 112.536076][ T6041] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.564067][ T6041] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.586578][ T6041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.633510][ T6041] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.660427][ T4303] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 112.688538][ T4303] visor: probe of 2-1:0.0 failed with error -5 [ 112.890131][ T7] usb 2-1: USB disconnect, device number 4 [ 113.196493][ T6068] loop4: detected capacity change from 0 to 1024 [ 113.281451][ T4346] hfsplus: b-tree write err: -5, ino 4 [ 113.586954][ T6081] loop1: detected capacity change from 0 to 8 [ 113.636794][ T6083] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.913102][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.920770][ T4303] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 114.133157][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 114.147043][ T4303] usb 3-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51 [ 114.157583][ T7] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 114.172369][ T4303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.187302][ T7] usb 2-1: config 0 has an invalid descriptor of length 190, skipping remainder of the config [ 114.209075][ T4303] usb 3-1: config 0 descriptor?? [ 114.222925][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 114.235762][ T4303] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4 [ 114.262608][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.296120][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.326525][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.336615][ T7] usb 2-1: Product: syz [ 114.340849][ T7] usb 2-1: Manufacturer: syz [ 114.372223][ T7] usb 2-1: SerialNumber: syz [ 114.384464][ T7] usb 2-1: config 0 descriptor?? [ 114.404515][ T7] cdc_ncm 2-1:0.0: skipping garbage [ 114.409802][ T7] cdc_ncm 2-1:0.0: CDC Union missing and no IAD found [ 114.445724][ T7] cdc_ncm 2-1:0.0: bind() failure [ 114.636543][ T6118] loop4: detected capacity change from 0 to 2048 [ 114.638463][ T4303] gspca_sn9c20x: Write register 1001 failed -71 [ 114.666373][ T4303] gspca_sn9c20x: Device initialization failed [ 114.672529][ T4303] gspca_sn9c20x: probe of 3-1:0.0 failed with error -71 [ 114.702049][ T6118] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.709174][ T4303] usb 3-1: USB disconnect, device number 4 [ 114.728194][ T14] usb 2-1: USB disconnect, device number 5 [ 114.869361][ T6126] loop3: detected capacity change from 0 to 1024 [ 114.913029][ T6126] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.969083][ T6126] __quota_error: 4 callbacks suppressed [ 114.969099][ T6126] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 115.063088][ T6126] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 115.075399][ T6126] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.815: Failed to acquire dquot type 0 [ 115.094961][ T6126] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 115.128877][ T6126] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #13: comm syz.3.815: corrupted inode contents [ 115.165632][ T6126] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #13: comm syz.3.815: mark_inode_dirty error [ 115.204850][ T6126] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #13: comm syz.3.815: corrupted inode contents [ 115.227720][ T6126] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #13: comm syz.3.815: mark_inode_dirty error [ 115.272420][ T6126] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #13: comm syz.3.815: corrupted inode contents [ 115.335400][ T6126] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 115.360813][ T6126] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #13: comm syz.3.815: corrupted inode contents [ 115.407795][ T6126] EXT4-fs error (device loop3): ext4_truncate:4312: inode #13: comm syz.3.815: mark_inode_dirty error [ 115.446455][ T6126] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 115.492131][ T6126] EXT4-fs (loop3): 1 truncate cleaned up [ 115.532931][ T6126] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.559542][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 115.572333][ T6152] loop1: detected capacity change from 0 to 512 [ 115.591946][ T6126] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 115.635665][ T6152] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 115.641800][ T6126] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 115.646413][ T6152] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 115.662267][ T6152] EXT4-fs (loop1): orphan cleanup on readonly fs [ 115.671444][ T6152] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #13: comm syz.1.826: iget: bad i_size value: 12154761577498 [ 115.698473][ T6126] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.815: Failed to acquire dquot type 0 [ 115.711200][ T6152] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.826: couldn't read orphan inode 13 (err -117) [ 115.732939][ T6152] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.775866][ T6152] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.826: dx entry: limit 65535 != root limit 120 [ 115.788455][ T6152] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.826: Corrupt directory, running e2fsck is recommended [ 115.885031][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 115.921679][ T4256] EXT4-fs (loop1): unmounting filesystem. [ 116.167418][ T4301] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.352955][ T4301] usb 3-1: Using ep0 maxpacket: 16 [ 116.363423][ T4301] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 116.388578][ T6154] loop4: detected capacity change from 0 to 32768 [ 116.395274][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.423142][ T4301] usb 3-1: Product: syz [ 116.433123][ T4301] usb 3-1: Manufacturer: syz [ 116.438939][ T4301] usb 3-1: SerialNumber: syz [ 116.448887][ T4301] r8152-cfgselector 3-1: config 0 descriptor?? [ 116.752145][ T6187] netlink: 830 bytes leftover after parsing attributes in process `syz.0.844'. [ 116.784444][ T6191] No such timeout policy "syz0" [ 116.883951][ T4301] r8152-cfgselector 3-1: Unknown version 0x0000 [ 116.890399][ T4301] r8152-cfgselector 3-1: bad CDC descriptors [ 116.908929][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 116.939612][ T4301] r8152-cfgselector 3-1: Unknown version 0x0000 [ 116.982390][ T4301] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 117.039500][ T26] audit: type=1326 audit(1751306002.790:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805b8e929 code=0x7ffc0000 [ 117.098310][ T26] audit: type=1326 audit(1751306002.790:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805b8e929 code=0x7ffc0000 [ 117.167298][ T26] audit: type=1326 audit(1751306002.830:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fc805b8e929 code=0x7ffc0000 [ 117.269836][ T26] audit: type=1326 audit(1751306002.830:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805b8e929 code=0x7ffc0000 [ 117.363373][ T26] audit: type=1326 audit(1751306002.830:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805b8e929 code=0x7ffc0000 [ 117.402156][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.855'. [ 117.448118][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.855'. [ 117.635564][ T6215] loop3: detected capacity change from 0 to 4096 [ 117.688282][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.862'. [ 118.368203][ T6247] loop3: detected capacity change from 0 to 4096 [ 118.782381][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.891'. [ 118.948480][ T6269] Illegal XDP return value 2961564155 on prog (id 29) dev N/A, expect packet loss! [ 118.967061][ T6246] loop2: detected capacity change from 0 to 32768 [ 119.082573][ T6246] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 119.195334][ T6246] (syz.2.872,6246,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 119.208438][ T6266] loop1: detected capacity change from 0 to 32768 [ 119.217932][ T6246] (syz.2.872,6246,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 119.244832][ T6266] (syz.1.880,6266,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 119.269437][ T6246] (syz.2.872,6246,0):ocfs2_mknod:502 ERROR: status = -117 [ 119.274154][ T6275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.284269][ T6275] IPv6: NLM_F_CREATE should be set when creating new route [ 119.287387][ T6266] (syz.1.880,6266,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 119.291512][ T6275] IPv6: NLM_F_CREATE should be set when creating new route [ 119.311006][ T6246] (syz.2.872,6246,0):ocfs2_mkdir:659 ERROR: status = -117 [ 119.369893][ T6266] (syz.1.880,6266,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 119.405026][ T6266] JBD2: Ignoring recovery information on journal [ 119.496242][ T6266] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 119.548787][ T6281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.589379][ T4263] ocfs2: Unmounting device (7,2) on (node local) [ 119.711429][ T4256] ocfs2: Unmounting device (7,1) on (node local) [ 119.887708][ T6267] loop4: detected capacity change from 0 to 32768 [ 119.976196][ T6267] add_index: next_index = 0. Resetting! [ 121.032914][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 121.170781][ T6317] loop4: detected capacity change from 0 to 32768 [ 121.223317][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 121.233555][ T7] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 121.243604][ T6317] (syz.4.902,6317,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 121.281059][ T7] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 121.295946][ T6317] (syz.4.902,6317,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 121.321805][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 121.331594][ T7] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 121.352877][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.367730][ T93] block nbd1: Attempted send on invalid socket [ 121.371775][ T6317] (syz.4.902,6317,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 121.373993][ T93] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.404123][ T93] block nbd1: Attempted send on invalid socket [ 121.404435][ T6317] JBD2: Ignoring recovery information on journal [ 121.410300][ T93] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.410407][ T6339] Mount JFS Failure: -5 [ 121.432902][ T7] usb 3-1: Product: syz [ 121.440821][ T7] usb 3-1: Manufacturer: syz [ 121.446219][ T7] usb 3-1: SerialNumber: syz [ 121.451691][ T6339] jfs_mount failed w/return code = -5 [ 121.458308][ T7] usb 3-1: config 0 descriptor?? [ 121.501950][ T6317] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 121.688931][ T6343] loop3: detected capacity change from 0 to 4096 [ 121.751293][ T6343] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.828002][ T6350] kAFS: unparsable volume name [ 121.836054][ T6343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 121.884659][ T4251] ocfs2: Unmounting device (7,4) on (node local) [ 121.899814][ T7] usb 3-1: USB disconnect, device number 6 [ 121.923469][ T6343] EXT4-fs: Cannot change journaled quota options when quota turned on [ 122.029708][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 122.152054][ T6356] loop3: detected capacity change from 0 to 256 [ 122.926501][ T6383] program syz.3.935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.949121][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 123.092990][ T14] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.282957][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 123.299723][ T14] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 123.328755][ T14] usb 3-1: config 0 has no interface number 0 [ 123.349002][ T14] usb 3-1: config 0 interface 99 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 123.384809][ T14] usb 3-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 123.407269][ T14] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=63.0c [ 123.450481][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.487537][ T14] usb 3-1: Product: syz [ 123.502021][ T14] usb 3-1: Manufacturer: syz [ 123.512142][ T14] usb 3-1: SerialNumber: syz [ 123.551638][ T14] usb 3-1: config 0 descriptor?? [ 123.563477][ T6380] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.571388][ T6380] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.601211][ T14] usbtest 3-1:0.99: usb test device [ 123.609838][ T14] usbtest 3-1:0.99: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 123.797320][ T6415] loop3: detected capacity change from 0 to 512 [ 123.849184][ T4316] usb 3-1: USB disconnect, device number 7 [ 123.889586][ T6415] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 123.911731][ T6415] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.063199][ T6415] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 124.088388][ T6415] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 124.106254][ T6415] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.951: Failed to acquire dquot type 0 [ 124.273617][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 124.410611][ T6436] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 124.711886][ T6442] nvme_fabrics: missing parameter 'transport=%s' [ 124.730370][ T6442] nvme_fabrics: missing parameter 'nqn=%s' [ 124.772213][ T6454] tmpfs: Bad value for 'mpol' [ 126.264611][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 126.452963][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 126.482743][ T7] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 126.540384][ T7] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 126.554108][ T7] usb 2-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 126.582975][ T7] usb 2-1: config 166 has no interface number 0 [ 126.611122][ T7] usb 2-1: config 166 has no interface number 1 [ 126.642974][ T7] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 126.649501][ T6535] loop3: detected capacity change from 0 to 1024 [ 126.671254][ T6535] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.672957][ T7] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 126.719272][ T7] usb 2-1: config 166 interface 34 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 126.744097][ T6535] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.771199][ T6535] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 126.788889][ T7] usb 2-1: config 166 interface 177 has no altsetting 0 [ 126.801501][ T6537] IPv6: sit1: Disabled Multicast RS [ 126.810088][ T7] usb 2-1: config 166 interface 34 has no altsetting 0 [ 126.845635][ T6535] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 126.848113][ T7] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 126.872931][ T32] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 126.943758][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.962573][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 126.978661][ T26] audit: type=1326 audit(1751306012.730:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739bf8e929 code=0x7ffc0000 [ 127.011771][ T7] usb 2-1: Product: syz [ 127.016455][ T7] usb 2-1: Manufacturer: syz [ 127.032911][ T7] usb 2-1: SerialNumber: syz [ 127.075348][ T32] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 127.089302][ T26] audit: type=1326 audit(1751306012.760:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739bf8e929 code=0x7ffc0000 [ 127.108631][ T32] usb 1-1: config 0 has no interface number 0 [ 127.147687][ T32] usb 1-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 127.170147][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.183700][ T32] usb 1-1: Product: syz [ 127.187893][ T32] usb 1-1: Manufacturer: syz [ 127.202947][ T32] usb 1-1: SerialNumber: syz [ 127.212942][ T26] audit: type=1326 audit(1751306012.780:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f739bf8e929 code=0x7ffc0000 [ 127.218410][ T32] usb 1-1: config 0 descriptor?? [ 127.264605][ T7] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 127.284501][ T26] audit: type=1326 audit(1751306012.780:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739bf8e929 code=0x7ffc0000 [ 127.289276][ T32] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 127.330342][ T32] dvb-usb: bulk message failed: -22 (4/0) [ 127.337713][ T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 127.348916][ T32] dvb-usb: bulk message failed: -22 (5/0) [ 127.363082][ T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 127.377827][ T26] audit: type=1326 audit(1751306012.780:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739bf8e929 code=0x7ffc0000 [ 127.384800][ T32] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 127.414755][ T7] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 127.414873][ T32] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 127.533224][ T7] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 127.539634][ T7] usb 2-1: No valid video chain found. [ 127.577614][ T7] usb 2-1: USB disconnect, device number 6 [ 127.599504][ T4301] usb 1-1: USB disconnect, device number 5 [ 127.632883][ T32] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.834774][ T32] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 127.853983][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 127.881724][ T32] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 127.917369][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.945683][ T32] usb 4-1: Product: syz [ 127.960420][ T32] usb 4-1: Manufacturer: syz [ 127.965898][ T32] usb 4-1: SerialNumber: syz [ 127.973734][ T6569] loop2: detected capacity change from 0 to 16 [ 127.997623][ T32] usb 4-1: config 0 descriptor?? [ 128.019365][ T6569] erofs: (device loop2): mounted with root inode @ nid 36. [ 128.043602][ T32] usb 4-1: selecting invalid altsetting 0 [ 128.085766][ T6569] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 128.321857][ T7] usb 4-1: USB disconnect, device number 4 [ 128.350878][ T6574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1022'. [ 128.382541][ T6574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1022'. [ 128.922023][ T26] audit: type=1326 audit(1751306014.670:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6595 comm="syz.2.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 128.970719][ T6598] netlink: 'syz.4.1036': attribute type 12 has an invalid length. [ 128.995278][ T26] audit: type=1326 audit(1751306014.710:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6595 comm="syz.2.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 129.005443][ T6598] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1036'. [ 129.088608][ T26] audit: type=1326 audit(1751306014.710:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6595 comm="syz.2.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 129.161414][ T26] audit: type=1326 audit(1751306014.710:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6595 comm="syz.2.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 129.186187][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 129.456794][ T6615] loop2: detected capacity change from 0 to 512 [ 129.517222][ T6615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 129.536704][ T6615] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.593944][ T6622] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1047'. [ 129.650117][ T6624] Lens B: ================= START STATUS ================= [ 129.658195][ T6624] Lens B: Focus, Absolute: 0 [ 129.664695][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.680235][ T6624] Lens B: ================== END STATUS ================== [ 129.731502][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 129.810027][ T6628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'. [ 129.865794][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 129.888695][ T7] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 129.925904][ T7] usb 4-1: config 179 has no interface number 0 [ 129.931076][ T6634] netlink: 'syz.4.1053': attribute type 1 has an invalid length. [ 129.951249][ T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 129.999411][ T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 130.021191][ T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.061869][ T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 130.093007][ T7] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 130.144573][ T7] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 130.172547][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.202635][ T6612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.339486][ T26] audit: type=1326 audit(1751306016.090:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.2.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 130.361695][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.422972][ T26] audit: type=1326 audit(1751306016.120:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.2.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 130.451686][ T6652] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms [ 130.534018][ T26] audit: type=1326 audit(1751306016.120:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.2.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 130.561402][ T26] audit: type=1326 audit(1751306016.120:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.2.1060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 130.568454][ T6652] device bond1 entered promiscuous mode [ 130.583566][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.644015][ T6612] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 130.651109][ T6612] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 130.673236][ T6652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.746250][ T6612] vhci_hcd vhci_hcd.0: Device attached [ 130.788762][ T6659] vhci_hcd: connection closed [ 130.789164][ T22] usb 4-1: USB disconnect, device number 5 [ 130.790449][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 130.809500][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 130.844453][ T4351] vhci_hcd: stop threads [ 130.849224][ T4351] vhci_hcd: release socket [ 130.869694][ T4351] vhci_hcd: disconnect device [ 130.943013][ T32] vhci_hcd: vhci_device speed not set [ 131.131260][ T6678] device lo entered promiscuous mode [ 131.163535][ T6678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.271189][ T6682] netlink: 'syz.4.1074': attribute type 21 has an invalid length. [ 131.289047][ T6682] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1074'. [ 131.641893][ T6692] loop4: detected capacity change from 0 to 4096 [ 131.677603][ T6692] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 131.679111][ T6698] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 131.809673][ T6692] ntfs3: loop4: failed to convert "c46c" to cp936 [ 132.228583][ T6719] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1093'. [ 132.243407][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1093'. [ 132.266028][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1095'. [ 132.393228][ T4303] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.573021][ T4303] usb 4-1: Using ep0 maxpacket: 32 [ 132.579827][ T4303] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.624299][ T4303] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.673432][ T4303] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 132.683011][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.689312][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.697049][ T4303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.718132][ T4303] hub 4-1:4.0: USB hub found [ 132.854540][ T6741] netlink: 'syz.4.1105': attribute type 10 has an invalid length. [ 132.902496][ T6741] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 132.921403][ T4303] hub 4-1:4.0: 2 ports detected [ 132.931172][ T4303] usb 4-1: selecting invalid altsetting 1 [ 132.939816][ T6741] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 132.948228][ T4303] hub 4-1:4.0: Using single TT (err -22) [ 132.973233][ T6741] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 133.004288][ T6741] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 133.127558][ T4303] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 133.136829][ T4303] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 133.203991][ T4303] usb 4-1: USB disconnect, device number 6 [ 133.387033][ T6763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1115'. [ 133.422856][ T6765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1116'. [ 133.475524][ T6767] loop1: detected capacity change from 0 to 16 [ 133.497193][ T6767] erofs: (device loop1): mounted with root inode @ nid 36. [ 133.545631][ T6770] netlink: 'syz.4.1119': attribute type 2 has an invalid length. [ 133.595538][ T6770] netlink: 'syz.4.1119': attribute type 1 has an invalid length. [ 133.859048][ T6783] netlink: 'syz.3.1124': attribute type 12 has an invalid length. [ 133.891470][ T6783] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 134.079365][ T6797] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 134.085392][ T6796] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1131'. [ 134.633722][ T6824] loop4: detected capacity change from 0 to 8 [ 134.756204][ T6815] loop3: detected capacity change from 0 to 4096 [ 134.876189][ T6831] loop4: detected capacity change from 0 to 64 [ 134.899106][ T6815] ntfs3: loop3: ino=5, "/" attr_set_size [ 134.952538][ T6815] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 135.245065][ T6839] xt_TCPMSS: Only works on TCP SYN packets [ 135.469650][ T6853] xt_l2tp: v2 doesn't support IP mode [ 135.533589][ T6855] loop2: detected capacity change from 0 to 8 [ 135.604792][ T6855] SQUASHFS error: Failed to read block 0x738: -5 [ 135.631842][ T6855] SQUASHFS error: Unable to read metadata cache entry [736] [ 135.805004][ T6860] loop1: detected capacity change from 0 to 8192 [ 135.878029][ T6860] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 135.955054][ T6860] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 135.967347][ T6872] loop2: detected capacity change from 0 to 4096 [ 136.071275][ T6860] REISERFS (device loop1): using ordered data mode [ 136.114002][ T6860] reiserfs: using flush barriers [ 136.148923][ T6860] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.213355][ T6860] REISERFS (device loop1): checking transaction log (loop1) [ 136.464382][ T6860] REISERFS (device loop1): Using tea hash to sort names [ 136.499858][ T6860] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 136.811410][ T6890] loop4: detected capacity change from 0 to 8192 [ 136.924293][ T6876] loop3: detected capacity change from 0 to 32768 [ 136.950353][ T6896] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms [ 137.109941][ T6896] device bond1 entered promiscuous mode [ 137.149456][ T6896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.265554][ T26] audit: type=1326 audit(1751306023.020:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935738e929 code=0x7ffc0000 [ 137.323154][ T26] audit: type=1326 audit(1751306023.030:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f935738e929 code=0x7ffc0000 [ 137.332952][ T4303] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.345330][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.438476][ T26] audit: type=1326 audit(1751306023.030:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935738e929 code=0x7ffc0000 [ 137.494489][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1189'. [ 137.522725][ T26] audit: type=1326 audit(1751306023.030:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.1.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935738e929 code=0x7ffc0000 [ 137.527876][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1189'. [ 137.544971][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.623161][ T4303] usb 5-1: Using ep0 maxpacket: 16 [ 137.638538][ T4303] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 137.657985][ T4303] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 137.677717][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1189'. [ 137.702156][ T4303] usb 5-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 137.742923][ T4303] usb 5-1: config 166 has no interface number 0 [ 137.756358][ T4303] usb 5-1: config 166 has no interface number 1 [ 137.773049][ T4303] usb 5-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 137.787797][ T6925] mmap: syz.0.1194 (6925): VmData 41648128 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 137.823561][ T4303] usb 5-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 137.853528][ T4303] usb 5-1: config 166 interface 34 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 137.889120][ T4303] usb 5-1: config 166 interface 177 has no altsetting 0 [ 137.932986][ T4303] usb 5-1: config 166 interface 34 has no altsetting 0 [ 137.989250][ T4303] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 138.022928][ T4303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.031002][ T4303] usb 5-1: Product: syz [ 138.043032][ T4303] usb 5-1: Manufacturer: syz [ 138.047668][ T4303] usb 5-1: SerialNumber: syz [ 138.167160][ T6943] netlink: 'syz.0.1203': attribute type 2 has an invalid length. [ 138.297095][ T4303] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 138.384841][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 138.404597][ T4303] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 138.506861][ T4303] usb 5-1: Found UVC 0.00 device syz (0bda:0138) [ 138.522471][ T4303] usb 5-1: No valid video chain found. [ 138.539942][ T4303] usb 5-1: USB disconnect, device number 3 [ 138.604738][ T7] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 138.615195][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.660763][ T7] usb 2-1: config 0 descriptor?? [ 138.752557][ T6964] loop3: detected capacity change from 0 to 256 [ 139.103863][ T7] [drm:udl_init] *ERROR* Selecting channel failed [ 139.169066][ T7] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 139.196914][ T7] [drm] Initialized udl on minor 2 [ 139.206539][ T7] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 139.222516][ T6982] loop2: detected capacity change from 0 to 64 [ 139.232535][ T7] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 139.277964][ T7] usb 2-1: USB disconnect, device number 7 [ 139.711201][ T7002] netlink: 'syz.2.1231': attribute type 9 has an invalid length. [ 139.753118][ T7002] netlink: 'syz.2.1231': attribute type 7 has an invalid length. [ 139.761640][ T7002] netlink: 'syz.2.1231': attribute type 8 has an invalid length. [ 139.792941][ T7002] netlink: 'syz.2.1231': attribute type 13 has an invalid length. [ 139.858951][ T7008] mmap: syz.4.1233 (7008) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.044931][ T7020] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 140.046251][ T7018] loop1: detected capacity change from 0 to 256 [ 140.111483][ T7018] FAT-fs (loop1): Directory bread(block 64) failed [ 140.132170][ T7018] FAT-fs (loop1): Directory bread(block 65) failed [ 140.169643][ T7018] FAT-fs (loop1): Directory bread(block 66) failed [ 140.191574][ T7018] FAT-fs (loop1): Directory bread(block 67) failed [ 140.221251][ T7018] FAT-fs (loop1): Directory bread(block 68) failed [ 140.261319][ T7018] FAT-fs (loop1): Directory bread(block 69) failed [ 140.268403][ T7018] FAT-fs (loop1): Directory bread(block 70) failed [ 140.289709][ T7018] FAT-fs (loop1): Directory bread(block 71) failed [ 140.306777][ T7018] FAT-fs (loop1): Directory bread(block 72) failed [ 140.315611][ T7018] FAT-fs (loop1): Directory bread(block 73) failed [ 140.487233][ T7036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1246'. [ 140.599072][ T7042] netlink: 'syz.1.1249': attribute type 2 has an invalid length. [ 140.667954][ T7042] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1249'. [ 141.215393][ T7071] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.320833][ T7076] device netdevsim0 entered promiscuous mode [ 141.348075][ T7076] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 141.358394][ T7078] loop2: detected capacity change from 0 to 64 [ 141.432898][ T6956] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 141.520036][ T7082] xt_TCPMSS: Only works on TCP SYN packets [ 141.543142][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 141.560923][ T7084] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1271'. [ 141.619718][ T7088] delete_channel: no stack [ 141.644892][ T6956] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.661168][ T6956] usb 2-1: not running at top speed; connect to a high speed hub [ 141.690622][ T6956] usb 2-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 141.710160][ T6956] usb 2-1: config 219 interface 0 has no altsetting 0 [ 141.730352][ T6956] usb 2-1: config 219 interface 0 has no altsetting 1 [ 141.744781][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 141.758446][ T7] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 141.780258][ T6956] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 141.799805][ T7] usb 4-1: config 0 has no interface number 0 [ 141.808177][ T6956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.822673][ T6956] usb 2-1: Product: syz [ 141.829702][ T6956] usb 2-1: Manufacturer: syz [ 141.840335][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 141.852441][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.869305][ T6956] usb 2-1: SerialNumber: syz [ 141.875968][ T7] usb 4-1: Product: syz [ 141.889861][ T7] usb 4-1: Manufacturer: syz [ 141.894952][ T7] usb 4-1: SerialNumber: syz [ 141.912308][ T7] usb 4-1: config 0 descriptor?? [ 142.103625][ T6956] usb 2-1: selecting invalid altsetting 0 [ 142.133798][ T7] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 142.147315][ T7] usb 4-1: No valid video chain found. [ 142.173435][ T7] usb 4-1: USB disconnect, device number 7 [ 142.210365][ T6956] snd-usb-audio: probe of 2-1:219.0 failed with error -22 [ 142.238281][ T6956] usb 2-1: USB disconnect, device number 8 [ 142.272149][ T4268] udevd[4268]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.956306][ T7147] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1301'. [ 143.285113][ T7165] netlink: 'syz.2.1311': attribute type 95 has an invalid length. [ 143.408992][ T4301] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 143.615451][ T4301] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.644151][ T4301] usb 5-1: not running at top speed; connect to a high speed hub [ 143.663507][ T4301] usb 5-1: config 8 has an invalid interface number: 24 but max is 0 [ 143.671626][ T4301] usb 5-1: config 8 has no interface number 0 [ 143.706593][ T4301] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64 [ 143.727839][ T4301] usb 5-1: config 8 interface 24 has no altsetting 0 [ 143.767015][ T4301] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 143.802891][ T4301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.818737][ T4301] usb 5-1: Product: syz [ 143.826959][ T4301] usb 5-1: Manufacturer: syz [ 143.842377][ T4301] usb 5-1: SerialNumber: syz [ 143.864362][ T7155] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 143.942108][ T7153] loop1: detected capacity change from 0 to 40427 [ 143.997832][ T7153] F2FS-fs (loop1): invalid crc value [ 144.011163][ T7153] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 144.045412][ T7153] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.106505][ T4301] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 144.165405][ T4301] usb 5-1: USB disconnect, device number 4 [ 144.202116][ T7153] F2FS-fs (loop1): recover fsync data on readonly fs [ 144.253495][ T7153] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 144.279132][ T7153] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 144.780946][ T7214] x_tables: duplicate underflow at hook 4 [ 144.805430][ T7216] netlink: 'syz.2.1337': attribute type 2 has an invalid length. [ 144.813673][ T4301] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 145.014541][ T4301] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.037600][ T7220] loop1: detected capacity change from 0 to 4096 [ 145.045070][ T4301] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 145.071627][ T7220] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 145.075392][ T4301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.122150][ T7220] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 145.124974][ T4301] usb 4-1: config 0 descriptor?? [ 145.173109][ T4301] usb 4-1: bad CDC descriptors [ 145.179631][ T4301] usb 4-1: bad CDC descriptors [ 145.235019][ T7220] ntfs3: loop1: ino=1b, "file0" The size of extended attributes must not exceed 64KiB [ 145.370646][ T4256] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 145.448384][ T4301] usb 4-1: USB disconnect, device number 8 [ 145.580812][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'. [ 145.617034][ T7237] netlink: 'syz.0.1346': attribute type 2 has an invalid length. [ 145.634055][ T7237] netlink: 'syz.0.1346': attribute type 1 has an invalid length. [ 145.651332][ T7237] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1346'. [ 145.902038][ T7255] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock [ 146.977683][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 147.045507][ T7314] netlink: 'syz.2.1384': attribute type 5 has an invalid length. [ 147.323731][ T7328] kAFS: unparsable volume name [ 147.937711][ T7357] loop4: detected capacity change from 0 to 256 [ 148.015996][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.052947][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.102884][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.121303][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.142352][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.163455][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.192940][ T7359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.207833][ T7359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.304875][ T7367] Zero length message leads to an empty skb [ 148.551019][ T7377] loop3: detected capacity change from 0 to 64 [ 148.610182][ T7377] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 148.653543][ T7361] loop1: detected capacity change from 0 to 32768 [ 148.966729][ T7387] kAFS: unable to lookup cell '.,' [ 149.176418][ T4327] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 149.383080][ T4327] usb 4-1: Using ep0 maxpacket: 16 [ 149.395844][ T4327] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 149.427040][ T4327] usb 4-1: config 0 has no interface number 0 [ 149.454918][ T4327] usb 4-1: config 0 interface 237 has no altsetting 0 [ 149.478581][ T4327] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 149.520869][ T4327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.557452][ T4327] usb 4-1: Product: syz [ 149.569738][ T4327] usb 4-1: Manufacturer: syz [ 149.571714][ T7417] loop4: detected capacity change from 0 to 764 [ 149.590912][ T4327] usb 4-1: SerialNumber: syz [ 149.613896][ T4327] usb 4-1: config 0 descriptor?? [ 149.627897][ T4327] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 found [ 149.634503][ T7417] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 149.841810][ T4327] snd_usb_podhd 4-1:0.237: cannot get proper max packet size [ 149.860783][ T4327] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 now disconnected [ 149.879634][ T4327] snd_usb_podhd: probe of 4-1:0.237 failed with error -22 [ 149.961255][ T7430] tmpfs: Bad value for 'mpol' [ 150.030914][ T7427] loop4: detected capacity change from 0 to 4096 [ 150.077069][ T4301] usb 4-1: USB disconnect, device number 9 [ 150.095562][ T7427] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 150.216278][ T7427] ntfs3: loop4: failed to convert "c46c" to iso8859-15 [ 150.610100][ T7453] loop1: detected capacity change from 0 to 64 [ 150.660393][ T7453] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 151.125702][ T7471] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 151.174087][ T7471] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 151.350837][ T7485] netlink: 'syz.3.1468': attribute type 1 has an invalid length. [ 151.402995][ T7485] netlink: 'syz.3.1468': attribute type 3 has an invalid length. [ 151.438980][ T7485] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1468'. [ 151.752329][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1478'. [ 151.753175][ T7502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1476'. [ 151.780998][ T7501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1478'. [ 152.760483][ T7543] loop2: detected capacity change from 0 to 16 [ 152.820497][ T7543] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 153.246779][ T7563] loop1: detected capacity change from 0 to 256 [ 153.324933][ T7563] FAT-fs (loop1): Directory bread(block 64) failed [ 153.352201][ T7563] FAT-fs (loop1): Directory bread(block 65) failed [ 153.392506][ T7563] FAT-fs (loop1): Directory bread(block 66) failed [ 153.430799][ T7563] FAT-fs (loop1): Directory bread(block 67) failed [ 153.456776][ T7563] FAT-fs (loop1): Directory bread(block 68) failed [ 153.489906][ T7563] FAT-fs (loop1): Directory bread(block 69) failed [ 153.490229][ T7572] netlink: 12296 bytes leftover after parsing attributes in process `syz.3.1512'. [ 153.505455][ T7563] FAT-fs (loop1): Directory bread(block 70) failed [ 153.518209][ T7563] FAT-fs (loop1): Directory bread(block 71) failed [ 153.542042][ T7563] FAT-fs (loop1): Directory bread(block 72) failed [ 153.562167][ T7563] FAT-fs (loop1): Directory bread(block 73) failed [ 153.644073][ T7572] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1512'. [ 153.706852][ T7579] loop4: detected capacity change from 0 to 1024 [ 154.065657][ T7591] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 154.598386][ T7619] loop1: detected capacity change from 0 to 1024 [ 154.874148][ T7622] loop4: detected capacity change from 0 to 4096 [ 154.909108][ T7629] __vm_enough_memory: pid: 7629, comm: syz.1.1541, no enough memory for the allocation [ 154.927310][ T7622] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 155.214027][ T7622] ntfs: (device loop4): parse_options(): NLS character set iso8(ê;3 not found. Using previous one utf8. [ 155.256680][ T7622] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 155.303696][ T26] audit: type=1326 audit(1751306041.060:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805b8e929 code=0x7ffc0000 [ 155.341286][ T7622] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 155.394512][ T26] audit: type=1326 audit(1751306041.060:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805b8e929 code=0x7ffc0000 [ 155.414180][ T7622] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 155.482922][ T7622] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 155.508764][ T26] audit: type=1326 audit(1751306041.060:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc805b8e929 code=0x7ffc0000 [ 155.562918][ T26] audit: type=1326 audit(1751306041.060:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805b8e929 code=0x7ffc0000 [ 155.658689][ T7622] ntfs: volume version 3.1. [ 155.807573][ T7657] loop1: detected capacity change from 0 to 4096 [ 155.875842][ T7657] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 155.994323][ T7657] ntfs3: loop1: failed to convert "c46c" to cp850 [ 156.456371][ T7690] loop2: detected capacity change from 0 to 164 [ 156.538296][ T7690] Unsupported NM flag settings (8) [ 156.921015][ T4262] Bluetooth: unknown link type 9 [ 157.174844][ T7719] loop4: detected capacity change from 0 to 256 [ 157.251184][ T7719] FAT-fs (loop4): Directory bread(block 64) failed [ 157.268729][ T7719] FAT-fs (loop4): Directory bread(block 65) failed [ 157.311267][ T7719] FAT-fs (loop4): Directory bread(block 66) failed [ 157.333952][ T7719] FAT-fs (loop4): Directory bread(block 67) failed [ 157.385848][ T7719] FAT-fs (loop4): Directory bread(block 68) failed [ 157.408706][ T7719] FAT-fs (loop4): Directory bread(block 69) failed [ 157.423725][ T7719] FAT-fs (loop4): Directory bread(block 70) failed [ 157.452906][ T7719] FAT-fs (loop4): Directory bread(block 71) failed [ 157.483688][ T7719] FAT-fs (loop4): Directory bread(block 72) failed [ 157.510207][ T7719] FAT-fs (loop4): Directory bread(block 73) failed [ 157.699522][ T7736] netlink: 'syz.2.1593': attribute type 21 has an invalid length. [ 157.752954][ T7736] netlink: 'syz.2.1593': attribute type 1 has an invalid length. [ 157.760764][ T7736] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1593'. [ 157.921933][ T7742] netlink: 'syz.4.1596': attribute type 10 has an invalid length. [ 157.952999][ T7742] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1596'. [ 158.005968][ T7742] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 158.130413][ T7754] cgroup: Name too long [ 158.261741][ T7761] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1605'. [ 158.626259][ T7770] loop1: detected capacity change from 0 to 4096 [ 158.627505][ T7780] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 158.663651][ T7779] loop4: detected capacity change from 0 to 1024 [ 158.673900][ T7770] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 158.701215][ T7779] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 158.761172][ T7779] EXT4-fs error (device loop4): ext4_free_inode:355: comm syz.4.1614: bit already cleared for inode 15 [ 158.817123][ T7788] loop2: detected capacity change from 0 to 512 [ 158.904539][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 158.910918][ T7788] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 158.929425][ T7788] System zones: 0-2, 18-18, 34-34 [ 158.982979][ T4262] Bluetooth: hci0: command 0x0409 tx timeout [ 158.987984][ T7788] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1619: bg 0: block 248: padding at end of block bitmap is not set [ 159.076853][ T7788] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.1619: Failed to acquire dquot type 1 [ 159.104489][ T7794] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1621'. [ 159.135082][ T7788] EXT4-fs (loop2): 1 truncate cleaned up [ 159.136138][ T7796] No such timeout policy "syz0" [ 159.140845][ T7788] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 159.197564][ T7799] netlink: 'syz.3.1623': attribute type 5 has an invalid length. [ 159.212450][ T7788] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.232286][ T7799] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1623'. [ 159.431132][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 159.755713][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 159.786089][ T7822] loop4: detected capacity change from 0 to 16 [ 159.808672][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 159.819424][ T7822] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 161.176715][ T7877] loop3: detected capacity change from 0 to 4096 [ 161.232324][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 161.252900][ T7877] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 161.263399][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 161.349153][ T7877] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 161.557496][ T7863] loop1: detected capacity change from 0 to 32768 [ 161.946946][ T7906] netlink: 'syz.0.1674': attribute type 30 has an invalid length. [ 162.285357][ T7924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1682'. [ 163.036770][ T7962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.244998][ T7970] loop1: detected capacity change from 0 to 256 [ 163.403405][ T7976] netlink: 'syz.2.1707': attribute type 27 has an invalid length. [ 163.508170][ T7978] loop4: detected capacity change from 0 to 256 [ 163.516016][ T7976] bond0: (slave bond_slave_0): Releasing backup interface [ 163.529076][ T7980] netlink: 'syz.1.1709': attribute type 1 has an invalid length. [ 163.560379][ T7980] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1709'. [ 163.588808][ T7978] FAT-fs (loop4): Directory bread(block 64) failed [ 163.600540][ T7978] FAT-fs (loop4): Directory bread(block 65) failed [ 163.628387][ T7978] FAT-fs (loop4): Directory bread(block 66) failed [ 163.657015][ T7949] loop3: detected capacity change from 0 to 32768 [ 163.663579][ T7978] FAT-fs (loop4): Directory bread(block 67) failed [ 163.664031][ T7978] FAT-fs (loop4): Directory bread(block 68) failed [ 163.707822][ T7978] FAT-fs (loop4): Directory bread(block 69) failed [ 163.732974][ T7978] FAT-fs (loop4): Directory bread(block 70) failed [ 163.739636][ T7978] FAT-fs (loop4): Directory bread(block 71) failed [ 163.799107][ T7978] FAT-fs (loop4): Directory bread(block 72) failed [ 163.833703][ T7978] FAT-fs (loop4): Directory bread(block 73) failed [ 163.883330][ T7949] XFS (loop3): Mounting V5 Filesystem [ 164.055125][ T7949] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 164.085356][ T7949] XFS (loop3): Starting recovery (logdev: internal) [ 164.092886][ T4327] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 164.140639][ T8004] sctp: [Deprecated]: syz.4.1715 (pid 8004) Use of int in maxseg socket option. [ 164.140639][ T8004] Use struct sctp_assoc_value instead [ 164.184118][ T7949] XFS (loop3): Ending recovery (logdev: internal) [ 164.289578][ T4327] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 164.308607][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.322882][ T4327] usb 2-1: Product: syz [ 164.332690][ T4327] usb 2-1: Manufacturer: syz [ 164.342973][ T4327] usb 2-1: SerialNumber: syz [ 164.358823][ T4327] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 164.369957][ T8010] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1720'. [ 164.403311][ T4327] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 164.585399][ T4254] XFS (loop3): Unmounting Filesystem [ 164.617749][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.656742][ T8018] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 164.823005][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 164.830478][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 164.880429][ T4303] usb 2-1: USB disconnect, device number 9 [ 164.897381][ T7] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 164.917469][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.935235][ T7] usb 5-1: Product: syz [ 164.943079][ T7] usb 5-1: Manufacturer: syz [ 164.948197][ T7] usb 5-1: SerialNumber: syz [ 164.955439][ T7] usb 5-1: config 0 descriptor?? [ 165.307443][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 165.307459][ T26] audit: type=1326 audit(1751306051.060:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 165.366978][ T26] audit: type=1326 audit(1751306051.090:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 165.368495][ T7] gs_usb 5-1:0.0: Couldn't get device config: (err=-71) [ 165.473265][ T7] gs_usb: probe of 5-1:0.0 failed with error -71 [ 165.481782][ T26] audit: type=1326 audit(1751306051.120:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 165.511539][ T7] usb 5-1: USB disconnect, device number 5 [ 165.570723][ T26] audit: type=1326 audit(1751306051.120:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 165.637223][ T26] audit: type=1326 audit(1751306051.120:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaaed8e929 code=0x7ffc0000 [ 165.710070][ T4327] usb 2-1: Service connection timeout for: 256 [ 165.720192][ T4327] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 165.769479][ T4327] ath9k_htc: Failed to initialize the device [ 165.786123][ T4303] usb 2-1: ath9k_htc: USB layer deinitialized [ 166.080672][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1746'. [ 166.242442][ T8071] usb usb8: usbfs: process 8071 (syz.0.1748) did not claim interface 0 before use [ 166.440136][ T8082] program syz.2.1754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.473041][ T8082] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 166.863165][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1766'. [ 166.905448][ T8105] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1766'. [ 167.040564][ T8114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1770'. [ 167.080152][ T8114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1770'. [ 167.435656][ T8096] loop2: detected capacity change from 0 to 32768 [ 167.511419][ T8096] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 167.620079][ T8096] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 167.885894][ T4263] ocfs2: Unmounting device (7,2) on (node local) [ 168.524242][ T8142] loop1: detected capacity change from 0 to 32768 [ 168.585192][ T8142] syz.1.1783: attempt to access beyond end of device [ 168.585192][ T8142] loop1: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 168.631857][ T8142] metapage_write_end_io: I/O error [ 168.644713][ T8142] ERROR: (device loop1): diWrite: ixpxd invalid [ 168.644713][ T8142] [ 168.672985][ T8142] ERROR: (device loop1): remounting filesystem as read-only [ 168.680487][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 168.700795][ T8142] ERROR: (device loop1): txCommit: [ 168.700795][ T8142] [ 168.709940][ T8170] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 168.730083][ T8142] blkno = 8f7c0, nblocks = 1 [ 168.738874][ T8142] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 168.738874][ T8142] [ 168.752477][ T8170] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 168.770609][ T8142] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 168.770609][ T8142] [ 168.788786][ T8142] ialloc: diAlloc returned -5! [ 168.898080][ T4256] syz-executor: attempt to access beyond end of device [ 168.898080][ T4256] loop1: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 168.939015][ T4256] metapage_write_end_io: I/O error [ 169.109662][ T8181] loop3: detected capacity change from 0 to 8 [ 169.200555][ T8181] SQUASHFS error: Failed to read block 0x6a4: -5 [ 169.217862][ T8181] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 169.248269][ T8181] SQUASHFS error: Unable to read inode 0x87 [ 169.273676][ T8168] loop4: detected capacity change from 0 to 32768 [ 169.485096][ T8189] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 169.706815][ T8195] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 169.755373][ T26] audit: type=1400 audit(1751306055.510:73): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8196 comm="syz.2.1810" [ 170.262704][ T8193] loop3: detected capacity change from 0 to 32768 [ 170.385616][ T8193] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1808 (8193) [ 170.504304][ T8193] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 170.558990][ T8193] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 170.576409][ T8193] BTRFS info (device loop3): force zlib compression, level 3 [ 170.601091][ T8193] BTRFS info (device loop3): force clearing of disk cache [ 170.628932][ T8193] BTRFS info (device loop3): setting nodatasum [ 170.675153][ T8193] BTRFS info (device loop3): allowing degraded mounts [ 170.712702][ T8193] BTRFS info (device loop3): enabling disk space caching [ 170.732732][ T8193] BTRFS info (device loop3): disk space caching is enabled [ 170.803080][ T22] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 170.938982][ T8193] BTRFS info (device loop3): rebuilding free space tree [ 170.986866][ T8193] BTRFS info (device loop3): disabling free space tree [ 170.986982][ T8193] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 170.987058][ T8193] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 170.994787][ T22] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 170.994812][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.994832][ T22] usb 3-1: config 0 has no interface number 0 [ 170.994859][ T22] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 170.994883][ T22] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 170.994904][ T22] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.994928][ T22] usb 3-1: config 0 interface 52 has no altsetting 0 [ 170.995957][ T22] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 170.995980][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 170.996000][ T22] usb 3-1: SerialNumber: syz [ 170.997603][ T22] usb 3-1: config 0 descriptor?? [ 171.117779][ T8193] BTRFS info (device loop3): balance: start -sprofiles=system|metadata|single|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=7,devid=0,drange=36028797018963968..70368744177664 [ 171.118697][ T8193] BTRFS info (device loop3): balance: ended with status: 0 [ 171.213295][ T22] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 171.213479][ T22] synaptics_usb: probe of 3-1:0.52 failed with error -5 [ 171.278060][ T4254] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 171.633025][ T8273] usb 3-1: USB disconnect, device number 8 [ 171.921141][ T8284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1837'. [ 172.363722][ T8305] netlink: 'syz.2.1847': attribute type 2 has an invalid length. [ 172.382954][ T8273] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 172.385702][ T8305] netlink: 'syz.2.1847': attribute type 1 has an invalid length. [ 172.407410][ T8305] netlink: 'syz.2.1847': attribute type 1 has an invalid length. [ 172.576730][ T8273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 172.611611][ T8273] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 172.645118][ T8273] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 172.664452][ T8273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.676093][ T8315] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 172.689820][ T8315] exFAT-fs (nullb0): invalid boot record signature [ 172.696813][ T8315] exFAT-fs (nullb0): failed to read boot sector [ 172.706635][ T8273] usb 2-1: Product: syz [ 172.709155][ T8315] exFAT-fs (nullb0): failed to recognize exfat type [ 172.710809][ T8273] usb 2-1: Manufacturer: syz [ 172.732304][ T8273] usb 2-1: SerialNumber: syz [ 172.744182][ T8273] usb 2-1: config 0 descriptor?? [ 172.880683][ T8307] loop3: detected capacity change from 0 to 32768 [ 173.226847][ T8274] usb 2-1: USB disconnect, device number 10 [ 173.481176][ T8339] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 173.723315][ T8350] x_tables: duplicate underflow at hook 3 [ 174.235687][ T8374] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 174.288841][ T8376] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1882'. [ 174.407832][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1883'. [ 174.453473][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1883'. [ 174.560764][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 174.778898][ T8396] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 174.823201][ T8396] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 175.146402][ T8419] netlink: 'syz.2.1904': attribute type 1 has an invalid length. [ 175.169642][ T8417] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 175.249684][ T8422] netlink: 'syz.0.1903': attribute type 27 has an invalid length. [ 175.368051][ T8422] bond0: (slave bond_slave_0): Releasing backup interface [ 175.437769][ T8431] device sit0 entered promiscuous mode [ 175.532598][ T8431] netlink: 'syz.3.1909': attribute type 1 has an invalid length. [ 175.583979][ T8431] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1909'. [ 175.594268][ T8435] loop1: detected capacity change from 0 to 8 [ 175.664585][ T8435] SQUASHFS error: lzo decompression failed, data probably corrupt [ 175.691823][ T8437] loop2: detected capacity change from 0 to 512 [ 175.702572][ T8435] SQUASHFS error: Failed to read block 0x144: -5 [ 175.711636][ T8435] SQUASHFS error: Unable to read metadata cache entry [142] [ 175.725348][ T8435] SQUASHFS error: Unable to read directory block [142:26] [ 175.827561][ T8437] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 175.873839][ T8444] loop3: detected capacity change from 0 to 256 [ 175.905081][ T8437] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.105152][ T4263] EXT4-fs (loop2): unmounting filesystem. [ 176.228121][ T26] audit: type=1326 audit(1751306061.980:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805b8e929 code=0x7ffc0000 [ 176.292034][ T26] audit: type=1326 audit(1751306062.010:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fc805b8e929 code=0x7ffc0000 [ 176.397458][ T26] audit: type=1326 audit(1751306062.010:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805b8e929 code=0x7ffc0000 [ 176.486675][ T26] audit: type=1326 audit(1751306062.010:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.3.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805b8e929 code=0x7ffc0000 [ 176.629136][ T8476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1930'. [ 177.302927][ T32] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 177.463357][ T8472] loop1: detected capacity change from 0 to 40427 [ 177.484584][ T8472] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 177.494767][ T32] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 177.505627][ T8472] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 177.525920][ T32] usb 3-1: config 5 has no interface number 0 [ 177.541420][ T8472] F2FS-fs (loop1): invalid crc value [ 177.548546][ T32] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 65535, setting to 64 [ 177.577463][ T8472] F2FS-fs (loop1): Found nat_bits in checkpoint [ 177.623996][ T32] usb 3-1: config 5 interface 123 has no altsetting 0 [ 177.653392][ T32] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 177.679138][ T8523] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1952'. [ 177.691167][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.700011][ T8523] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1952'. [ 177.710246][ T8472] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 177.726640][ T8472] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 177.732904][ T32] usb 3-1: Product: syz [ 177.738788][ T32] usb 3-1: Manufacturer: syz [ 177.748567][ T32] usb 3-1: SerialNumber: syz [ 177.757029][ T8523] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1952'. [ 177.758864][ T8517] loop3: detected capacity change from 0 to 4096 [ 177.785952][ T8496] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 177.795577][ T8472] syz.1.1928: attempt to access beyond end of device [ 177.795577][ T8472] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.823741][ T8517] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 177.834155][ T8523] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 177.957949][ T8517] ntfs3: loop3: ino=5, "/" The size of extended attributes must not exceed 64KiB [ 178.015094][ T32] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 178.071960][ T32] usb 3-1: USB disconnect, device number 9 [ 178.378150][ T8536] tmpfs: Unexpected value for 'inode32' [ 178.562992][ T8274] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 178.762910][ T8274] usb 4-1: Using ep0 maxpacket: 16 [ 178.769663][ T8274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.823022][ T8274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.843178][ T8274] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.891658][ T8274] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 178.933633][ T8274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.967482][ T8274] usb 4-1: config 0 descriptor?? [ 178.995729][ T8274] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 179.032405][ T3610] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 179.083345][ T3610] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 179.130001][ T5446] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 179.203307][ T3610] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 179.221738][ T3610] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 179.262028][ T3610] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 179.294334][ T8532] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 179.314942][ T3610] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 179.331973][ T8274] usb 4-1: USB disconnect, device number 10 [ 179.684244][ T8580] netlink: 'syz.1.1978': attribute type 2 has an invalid length. [ 180.438617][ T8617] JFS: discard option not supported on device [ 180.487967][ T52] block nbd2: Attempted send on invalid socket [ 180.494527][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.509582][ T8623] loop3: detected capacity change from 0 to 512 [ 180.511493][ T93] block nbd2: Attempted send on invalid socket [ 180.522125][ T93] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.536152][ T8617] Mount JFS Failure: -5 [ 180.540096][ T8623] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1998: attempt to clear invalid blocks 1 len 1 [ 180.631081][ T8623] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1998: bg 0: block 343: padding at end of block bitmap is not set [ 180.670997][ T8623] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 180.722276][ T8623] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1998: invalid indirect mapped block 1819239214 (level 0) [ 180.799628][ T8623] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1998: invalid indirect mapped block 1819239214 (level 1) [ 180.854319][ T8623] EXT4-fs (loop3): 1 truncate cleaned up [ 180.860126][ T8623] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 180.965960][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 181.030741][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 181.148453][ T8646] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2010'. [ 181.157804][ T8646] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2010'. [ 181.337508][ T8654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2013'. [ 181.512282][ T52] block nbd3: Attempted send on invalid socket [ 181.512308][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.719319][ T8671] loop2: detected capacity change from 0 to 256 [ 181.792154][ T8671] FAT-fs (loop2): Directory bread(block 64) failed [ 181.792191][ T8671] FAT-fs (loop2): Directory bread(block 65) failed [ 181.792256][ T8671] FAT-fs (loop2): Directory bread(block 66) failed [ 181.792280][ T8671] FAT-fs (loop2): Directory bread(block 67) failed [ 181.792349][ T8671] FAT-fs (loop2): Directory bread(block 68) failed [ 181.792373][ T8671] FAT-fs (loop2): Directory bread(block 69) failed [ 181.792437][ T8671] FAT-fs (loop2): Directory bread(block 70) failed [ 181.792461][ T8671] FAT-fs (loop2): Directory bread(block 71) failed [ 181.792528][ T8671] FAT-fs (loop2): Directory bread(block 72) failed [ 181.792553][ T8671] FAT-fs (loop2): Directory bread(block 73) failed [ 181.851007][ T8671] afs: Unexpected value for 'dyn' [ 182.156724][ T8273] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 182.212664][ T8686] loop2: detected capacity change from 0 to 164 [ 182.227234][ T8687] netlink: 'syz.4.2029': attribute type 27 has an invalid length. [ 182.347048][ T8273] usb 4-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 182.362885][ T8273] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 182.373160][ T8273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.409664][ T8687] bond0: (slave bond_slave_0): Releasing backup interface [ 182.421935][ T8273] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 182.439836][ T8273] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 182.458574][ T8273] usb 4-1: Product: syz [ 182.472885][ T8273] usb 4-1: Manufacturer: syz [ 182.477528][ T8273] usb 4-1: SerialNumber: syz [ 182.489126][ T8273] usb 4-1: config 0 descriptor?? [ 182.782448][ T8703] device ip6tnl1 entered promiscuous mode [ 182.931335][ T8273] usb 4-1: USB disconnect, device number 11 [ 183.179959][ T8701] loop1: detected capacity change from 0 to 32768 [ 183.236741][ T8701] read_mapping_page failed! [ 183.265335][ T8715] loop2: detected capacity change from 0 to 2048 [ 183.284025][ T8715] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362 [ 183.328268][ T8715] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 183.371526][ T8715] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 183.376242][ T8717] nftables ruleset with unbound chain [ 183.411115][ T8715] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.821912][ T8733] netlink: 'syz.1.2053': attribute type 3 has an invalid length. [ 184.271852][ T8752] loop4: detected capacity change from 0 to 8 [ 184.796504][ T8735] loop3: detected capacity change from 0 to 32768 [ 184.902029][ T8735] JBD2: Ignoring recovery information on journal [ 184.943125][ T4327] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 185.124939][ T8735] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 185.147369][ T4327] usb 3-1: Using ep0 maxpacket: 8 [ 185.156109][ T4327] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 185.202927][ T4327] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 185.225632][ T4327] usb 3-1: config 0 interface 0 has no altsetting 0 [ 185.264993][ T4327] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 185.299091][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.330504][ T4327] usb 3-1: Product: syz [ 185.343922][ T4327] usb 3-1: Manufacturer: syz [ 185.345823][ T4254] ocfs2: Unmounting device (7,3) on (node local) [ 185.363264][ T4327] usb 3-1: SerialNumber: syz [ 185.389665][ T4327] usb 3-1: config 0 descriptor?? [ 185.425331][ T4327] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 185.616935][ T4327] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 185.644041][ T4327] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 185.669860][ T4327] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 185.846612][ T32] usb 3-1: USB disconnect, device number 10 [ 185.942950][ T4267] Bluetooth: hci0: command 0x0406 tx timeout [ 185.943125][ T4262] Bluetooth: hci2: command 0x0406 tx timeout [ 185.949026][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 185.955160][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 185.955190][ T4262] Bluetooth: hci4: command 0x0406 tx timeout [ 186.619176][ T8824] loop1: detected capacity change from 0 to 32768 [ 186.660942][ T8824] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2098 (8824) [ 186.761064][ T8824] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 186.779017][ T8824] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 186.796906][ T8824] BTRFS info (device loop1): force zlib compression, level 3 [ 186.820633][ T8824] BTRFS info (device loop1): force clearing of disk cache [ 186.831394][ T8824] BTRFS info (device loop1): setting nodatasum [ 186.855984][ T8824] BTRFS info (device loop1): allowing degraded mounts [ 186.888015][ T8824] BTRFS info (device loop1): enabling disk space caching [ 186.927920][ T8824] BTRFS info (device loop1): disk space caching is enabled [ 187.328674][ T8889] netlink: 'syz.3.2118': attribute type 11 has an invalid length. [ 187.351496][ T8824] BTRFS info (device loop1): rebuilding free space tree [ 187.403925][ T8824] BTRFS info (device loop1): disabling free space tree [ 187.410871][ T8824] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 187.462075][ T8824] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 187.583042][ T8893] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 187.592043][ T8880] loop4: detected capacity change from 0 to 32768 [ 187.645644][ T8824] BTRFS info (device loop1): balance: start -sconvert=raid0,soft,usage=7,usage=7..0,devid=0,vrange=18446744073709551614..18446744073709551612 [ 187.666994][ T8880] (syz.4.2116,8880,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 187.711244][ T8880] (syz.4.2116,8880,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 187.714581][ T8824] BTRFS info (device loop1): balance: ended with status: 0 [ 187.812355][ T8880] JBD2: Ignoring recovery information on journal [ 187.912104][ T4256] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 188.078920][ T8880] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 188.121715][ T8905] dlm: non-version read from control device 0 [ 188.152152][ T8880] [ 188.154540][ T8880] ====================================================== [ 188.161560][ T8880] WARNING: possible circular locking dependency detected [ 188.171559][ T8880] 6.1.142-syzkaller #0 Not tainted [ 188.176808][ T8880] ------------------------------------------------------ [ 188.183843][ T8880] syz.4.2116/8880 is trying to acquire lock: [ 188.189830][ T8880] ffff888057576a20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 188.200730][ T8880] [ 188.200730][ T8880] but task is already holding lock: [ 188.208100][ T8880] ffff888057576d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 188.220745][ T8880] [ 188.220745][ T8880] which lock already depends on the new lock. [ 188.220745][ T8880] [ 188.231160][ T8880] [ 188.231160][ T8880] the existing dependency chain (in reverse order) is: [ 188.240195][ T8880] [ 188.240195][ T8880] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}: [ 188.250735][ T8880] down_write+0x36/0x60 [ 188.255438][ T8880] ocfs2_lock_global_qf+0x1c7/0x270 [ 188.261176][ T8880] ocfs2_acquire_dquot+0x2a0/0xb10 [ 188.266827][ T8880] dqget+0x778/0xeb0 [ 188.271257][ T8880] dquot_set_dqblk+0x27/0xf90 [ 188.276467][ T8880] quota_setquota+0x4ac/0x530 [ 188.281689][ T8880] __se_sys_quotactl+0x295/0x6b0 [ 188.287169][ T8880] do_syscall_64+0x4c/0xa0 [ 188.292126][ T8880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.298563][ T8880] [ 188.298563][ T8880] -> #5 (&dquot->dq_lock){+.+.}-{3:3}: [ 188.306223][ T8880] __mutex_lock+0x120/0xaf0 [ 188.311264][ T8880] dquot_commit+0x5a/0x410 [ 188.316218][ T8880] ext4_write_dquot+0x1f0/0x360 [ 188.321606][ T8880] mark_all_dquot_dirty+0x1e3/0x400 [ 188.327337][ T8880] __dquot_free_space+0x7ec/0xbc0 [ 188.332901][ T8880] ext4_free_blocks+0x1bab/0x2640 [ 188.338459][ T8880] ext4_ext_remove_space+0x1f0d/0x4490 [ 188.344446][ T8880] ext4_ext_truncate+0x211/0x370 [ 188.349913][ T8880] ext4_truncate+0xa0b/0x1230 [ 188.355117][ T8880] ext4_evict_inode+0xb35/0x1100 [ 188.360585][ T8880] evict+0x485/0x870 [ 188.365012][ T8880] ext4_orphan_cleanup+0xbd3/0x1400 [ 188.370740][ T8880] ext4_fill_super+0x7b78/0x8110 [ 188.376210][ T8880] get_tree_bdev+0x3f1/0x610 [ 188.381331][ T8880] vfs_get_tree+0x88/0x270 [ 188.386284][ T8880] do_new_mount+0x24a/0xa40 [ 188.391314][ T8880] __se_sys_mount+0x2d6/0x3c0 [ 188.396516][ T8880] do_syscall_64+0x4c/0xa0 [ 188.401448][ T8880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.407856][ T8880] [ 188.407856][ T8880] -> #4 (&ei->i_data_sem){++++}-{3:3}: [ 188.415490][ T8880] down_write+0x36/0x60 [ 188.420160][ T8880] ext4_truncate+0x987/0x1230 [ 188.425371][ T8880] ext4_setattr+0x10cb/0x19f0 [ 188.430552][ T8880] notify_change+0xc74/0xf40 [ 188.435651][ T8880] do_truncate+0x197/0x220 [ 188.440576][ T8880] do_sys_ftruncate+0x312/0x3c0 [ 188.445937][ T8880] do_syscall_64+0x4c/0xa0 [ 188.450865][ T8880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.457272][ T8880] [ 188.457272][ T8880] -> #3 (jbd2_handle){++++}-{0:0}: [ 188.464559][ T8880] start_this_handle+0x1f49/0x2150 [ 188.470176][ T8880] jbd2__journal_start+0x2b7/0x5a0 [ 188.475791][ T8880] jbd2_journal_start+0x26/0x30 [ 188.481149][ T8880] ocfs2_start_trans+0x372/0x6c0 [ 188.486595][ T8880] ocfs2_modify_bh+0xe5/0x460 [ 188.491780][ T8880] ocfs2_local_read_info+0x13b1/0x16e0 [ 188.497745][ T8880] dquot_load_quota_sb+0x756/0xac0 [ 188.503373][ T8880] dquot_load_quota_inode+0x2d8/0x5d0 [ 188.509255][ T8880] ocfs2_enable_quotas+0x1c3/0x440 [ 188.514871][ T8880] ocfs2_fill_super+0x409f/0x4d00 [ 188.520399][ T8880] mount_bdev+0x287/0x3c0 [ 188.525237][ T8880] legacy_get_tree+0xe6/0x180 [ 188.530420][ T8880] vfs_get_tree+0x88/0x270 [ 188.535342][ T8880] do_new_mount+0x24a/0xa40 [ 188.540387][ T8880] __se_sys_mount+0x2d6/0x3c0 [ 188.545571][ T8880] do_syscall_64+0x4c/0xa0 [ 188.550495][ T8880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.556899][ T8880] [ 188.556899][ T8880] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 188.565397][ T8880] down_read+0x42/0x2d0 [ 188.570060][ T8880] ocfs2_start_trans+0x366/0x6c0 [ 188.575508][ T8880] ocfs2_modify_bh+0xe5/0x460 [ 188.580694][ T8880] ocfs2_local_read_info+0x13b1/0x16e0 [ 188.586658][ T8880] dquot_load_quota_sb+0x756/0xac0 [ 188.592275][ T8880] dquot_load_quota_inode+0x2d8/0x5d0 [ 188.598152][ T8880] ocfs2_enable_quotas+0x1c3/0x440 [ 188.603771][ T8880] ocfs2_fill_super+0x409f/0x4d00 [ 188.609299][ T8880] mount_bdev+0x287/0x3c0 [ 188.614136][ T8880] legacy_get_tree+0xe6/0x180 [ 188.619318][ T8880] vfs_get_tree+0x88/0x270 [ 188.624244][ T8880] do_new_mount+0x24a/0xa40 [ 188.629252][ T8880] __se_sys_mount+0x2d6/0x3c0 [ 188.634433][ T8880] do_syscall_64+0x4c/0xa0 [ 188.639362][ T8880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.645768][ T8880] [ 188.645768][ T8880] -> #1 (sb_internal#3){.+.+}-{0:0}: [ 188.653227][ T8880] ocfs2_start_trans+0x267/0x6c0 [ 188.658668][ T8880] ocfs2_write_info+0x117/0x350 [ 188.664023][ T8880] dquot_set_dqinfo+0x459/0x6c0 [ 188.669384][ T8880] quota_setinfo+0x2a4/0x2b0 [ 188.674484][ T8880] __se_sys_quotactl+0x295/0x6b0 [ 188.679928][ T8880] do_syscall_64+0x4c/0xa0 [ 188.684853][ T8880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.691257][ T8880] [ 188.691257][ T8880] -> #0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 188.700098][ T8880] __lock_acquire+0x2cf8/0x7c50 [ 188.705458][ T8880] lock_acquire+0x1b4/0x490 [ 188.710470][ T8880] down_write+0x36/0x60 [ 188.715134][ T8880] ocfs2_lock_global_qf+0x1e5/0x270 [ 188.720926][ T8880] ocfs2_acquire_dquot+0x2a0/0xb10 [ 188.726542][ T8880] dqget+0x778/0xeb0 [ 188.730943][ T8880] dquot_set_dqblk+0x27/0xf90 [ 188.736123][ T8880] quota_setquota+0x4ac/0x530 [ 188.741306][ T8880] __se_sys_quotactl+0x295/0x6b0 [ 188.746752][ T8880] do_syscall_64+0x4c/0xa0 [ 188.751678][ T8880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.758082][ T8880] [ 188.758082][ T8880] other info that might help us debug this: [ 188.758082][ T8880] [ 188.768290][ T8880] Chain exists of: [ 188.768290][ T8880] &ocfs2_quota_ip_alloc_sem_key --> &dquot->dq_lock --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8 [ 188.768290][ T8880] [ 188.785399][ T8880] Possible unsafe locking scenario: [ 188.785399][ T8880] [ 188.792827][ T8880] CPU0 CPU1 [ 188.798174][ T8880] ---- ---- [ 188.803536][ T8880] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8); [ 188.810807][ T8880] lock(&dquot->dq_lock); [ 188.817726][ T8880] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8); [ 188.827514][ T8880] lock(&ocfs2_quota_ip_alloc_sem_key); [ 188.833131][ T8880] [ 188.833131][ T8880] *** DEADLOCK *** [ 188.833131][ T8880] [ 188.841259][ T8880] 3 locks held by syz.4.2116/8880: [ 188.846352][ T8880] #0: ffff88802f5780e0 (&type->s_umount_key#65){++++}-{3:3}, at: user_get_super+0x118/0x240 [ 188.856525][ T8880] #1: ffff88805770c0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 188.866517][ T8880] #2: ffff888057576d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 188.879465][ T8880] [ 188.879465][ T8880] stack backtrace: [ 188.885355][ T8880] CPU: 0 PID: 8880 Comm: syz.4.2116 Not tainted 6.1.142-syzkaller #0 [ 188.893406][ T8880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.903454][ T8880] Call Trace: [ 188.906726][ T8880] [ 188.909646][ T8880] dump_stack_lvl+0x168/0x22e [ 188.914316][ T8880] ? load_image+0x3b0/0x3b0 [ 188.918811][ T8880] ? show_regs_print_info+0x12/0x12 [ 188.924004][ T8880] ? print_circular_bug+0x12b/0x1a0 [ 188.929194][ T8880] check_noncircular+0x274/0x310 [ 188.934120][ T8880] ? add_chain_block+0x940/0x940 [ 188.939047][ T8880] ? lockdep_lock+0xdc/0x1e0 [ 188.943625][ T8880] ? lockdep_unlock+0x133/0x2d0 [ 188.948461][ T8880] ? lockdep_lock+0x1e0/0x1e0 [ 188.953124][ T8880] ? _find_first_zero_bit+0xcf/0x100 [ 188.958396][ T8880] __lock_acquire+0x2cf8/0x7c50 [ 188.963244][ T8880] ? verify_lock_unused+0x140/0x140 [ 188.968429][ T8880] ? ocfs2_inode_lock_full_nested+0xcb3/0x1b20 [ 188.974575][ T8880] lock_acquire+0x1b4/0x490 [ 188.979069][ T8880] ? ocfs2_lock_global_qf+0x1e5/0x270 [ 188.984428][ T8880] ? __might_sleep+0xd0/0xd0 [ 188.989007][ T8880] ? preempt_count_add+0x8d/0x190 [ 188.994014][ T8880] ? read_lock_is_recursive+0x10/0x10 [ 188.999375][ T8880] ? rwsem_write_trylock+0x12f/0x1b0 [ 189.004648][ T8880] ? clear_nonspinnable+0x60/0x60 [ 189.009659][ T8880] ? __rwlock_init+0x140/0x140 [ 189.014413][ T8880] down_write+0x36/0x60 [ 189.018555][ T8880] ? ocfs2_lock_global_qf+0x1e5/0x270 [ 189.023911][ T8880] ocfs2_lock_global_qf+0x1e5/0x270 [ 189.029096][ T8880] ? lock_buffer+0x80/0x80 [ 189.033495][ T8880] ? trace_contention_end+0x5f/0x170 [ 189.038766][ T8880] ocfs2_acquire_dquot+0x2a0/0xb10 [ 189.043863][ T8880] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 189.049482][ T8880] ? from_kgid+0x159/0x680 [ 189.053884][ T8880] ? ocfs2_destroy_dquot+0x40/0x40 [ 189.058984][ T8880] dqget+0x778/0xeb0 [ 189.062870][ T8880] dquot_set_dqblk+0x27/0xf90 [ 189.067536][ T8880] quota_setquota+0x4ac/0x530 [ 189.072203][ T8880] ? quota_getnextquota+0x450/0x450 [ 189.077395][ T8880] ? bpf_lsm_capable+0x5/0x10 [ 189.082061][ T8880] ? do_quotactl+0x4f3/0x710 [ 189.086640][ T8880] __se_sys_quotactl+0x295/0x6b0 [ 189.091570][ T8880] ? __x64_sys_quotactl+0xa0/0xa0 [ 189.096585][ T8880] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 189.102555][ T8880] ? lock_chain_count+0x20/0x20 [ 189.107397][ T8880] ? lockdep_hardirqs_on+0x94/0x140 [ 189.112581][ T8880] do_syscall_64+0x4c/0xa0 [ 189.116989][ T8880] ? clear_bhb_loop+0x60/0xb0 [ 189.121648][ T8880] ? clear_bhb_loop+0x60/0xb0 [ 189.126312][ T8880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.132202][ T8880] RIP: 0033:0x7f739bf8e929 [ 189.136614][ T8880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.156211][ T8880] RSP: 002b:00007f739bdff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 189.164608][ T8880] RAX: ffffffffffffffda RBX: 00007f739c1b5fa0 RCX: 00007f739bf8e929 [ 189.172564][ T8880] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000801 [ 189.180544][ T8880] RBP: 00007f739c010b39 R08: 0000000000000000 R09: 0000000000000000 [ 189.188689][ T8880] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 189.196650][ T8880] R13: 0000000000000000 R14: 00007f739c1b5fa0 R15: 00007ffc1c541c18 [ 189.204625][ T8880] [ 189.258450][ T4251] ocfs2: Unmounting device (7,4) on (node local) [ 194.105894][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.112218][ T1277] ieee802154 phy1 wpan1: encryption failed: -22