last executing test programs: 2m27.912818643s ago: executing program 1 (id=38): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfa, &(0x7f0000004100)=""/42) 2m27.657221985s ago: executing program 1 (id=42): r0 = gettid() prlimit64(r0, 0xb, 0x0, 0x0) 2m27.443980066s ago: executing program 1 (id=46): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000300000000f7"], 0xe) 2m27.208182288s ago: executing program 1 (id=49): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000100)={[{@keep_last_dots}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {}, {@umask}, {@namecase}]}, 0x4, 0x1510, &(0x7f00000037c0)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x400, 0x0) 2m26.654288792s ago: executing program 1 (id=56): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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") symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 2m26.058343407s ago: executing program 1 (id=62): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8932, &(0x7f0000000000)={'bridge_slave_0\x00', @random="37e4cb97f60d"}) 2m25.449996331s ago: executing program 32 (id=62): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8932, &(0x7f0000000000)={'bridge_slave_0\x00', @random="37e4cb97f60d"}) 2.984974328s ago: executing program 3 (id=1873): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x3, 0x0, 0x5}}, 0x18}}, 0x24040004) 2.805458979s ago: executing program 3 (id=1877): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000014c0)={0x10, 0x3f4, 0x0, 0x0, 0x0, {0x10, 0x3e9}}, 0x420}}, 0x0) 2.506337061s ago: executing program 3 (id=1882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 2.231018113s ago: executing program 3 (id=1887): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb2000905815bff"], 0x0) 1.723718137s ago: executing program 2 (id=1896): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syzkaller1\x00', 0x10) 1.712231157s ago: executing program 0 (id=1897): r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, 0x0, 0x700) 1.513519119s ago: executing program 5 (id=1899): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"bcffffff", 0x0, 0x5, 0x1, 0x0, 0x0, '\x00', "00aa071e", "0300", "97ad3700", ["fdfbfdffffffffffffff0040", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]}) 1.466776069s ago: executing program 0 (id=1900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fsetxattr$security_capability(r0, &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0xd7, 0x69}, {0x5, 0x1}], 0xffffffffffffffff}, 0x18, 0x1) 1.461729779s ago: executing program 2 (id=1901): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast2, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x2, 0x8, 0x3, 0x500, 0x40, 0x100002}) 1.31616339s ago: executing program 0 (id=1903): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)=@mmap={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "919412eb"}}) 1.229417841s ago: executing program 2 (id=1904): r0 = syz_open_dev$I2C(&(0x7f0000002680), 0x0, 0xa2d81) pwrite64(r0, 0x0, 0x0, 0x5) 1.101820722s ago: executing program 2 (id=1905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd4}}, 0x0) 1.101376602s ago: executing program 4 (id=1906): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x560b, 0x7ffffffffffffffc) 1.052110792s ago: executing program 0 (id=1907): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x2000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000b00)={{0x3, 0x2, 0x1, 0x0, 0xaa}}) 1.011058912s ago: executing program 5 (id=1908): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newsa={0xf0, 0x1a, 0x713, 0x0, 0x0, {{@in6=@loopback, @in=@multicast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@multicast2, {0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x4, 0xa, 0x1}}, 0xf0}}, 0x0) 862.303143ms ago: executing program 4 (id=1909): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x10}, {0x10, 0x110, 0xd}], 0x20, 0xe000}, 0x5}], 0x1, 0xc800) 861.648144ms ago: executing program 2 (id=1910): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3f, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x300a}) 706.492004ms ago: executing program 5 (id=1911): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6e]}, 0x8, 0x80000) readv(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/44, 0x2c}], 0x1) 680.408415ms ago: executing program 4 (id=1912): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 629.611815ms ago: executing program 0 (id=1913): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 532.019776ms ago: executing program 5 (id=1914): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 531.764586ms ago: executing program 2 (id=1915): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2014000, &(0x7f0000000b00)=ANY=[@ANYBLOB="636865636b3d72656c617865642c726f6469722c757365667265652c636865636b3d7374726963742c636f6465706167653d3933362c756e695f786c6174653d312c696f636861727365743d63703836302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030332c73686f72746e616d653d77696e39352c726f6469722c00c6dfbada2ee932fe525d25c3bc47d13610750cb6cad30cca8908ec860a794e0bebae69acb037fc1df379c865ec39f322b5f47604526ef013bf43f067527dde9e5f"], 0x26, 0x336, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) 530.889156ms ago: executing program 3 (id=1916): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@sysvgroups}, {@discard}, {@grpjquota}, {@noload}, {@nobarrier}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=ANY=[], 0x3e, 0x0) 491.837346ms ago: executing program 4 (id=1917): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20032000101000a000002a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc17e8873edd467621350607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033b579ac2dfc061f15003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3af", 0xc0) 334.689268ms ago: executing program 5 (id=1918): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) 266.414128ms ago: executing program 4 (id=1919): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000080)) 249.120778ms ago: executing program 4 (id=1920): syz_mount_image$sysv(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRESOCT, @ANYBLOB="ae7a0dadf24984174336c19bd4f6eb98b0c50f5a9bd5286d2e7f0e4f054a25414aa32fdeef450696d15e128704af022de14173ebb760e32e889e14da2357898d351e050f1f225943a3c36490490da55de4e8c8ab43db748d9f9b003303df9de176b1b3daf0236cbae146c6350db7b278a26de50afdfce6537d0db2e2bf4981b5867c58dd2482d0aed80e28cdfc25086a2ee544803ddea6f5114b1f40a2e0ab2d3521b833cbea05551041bca8bf1f55c4e1f71c12512edcbfe00ab970afffd12d82e24cc27a826f541121bf02e1676ca028699487710fd312eb", @ANYRES64=0x0], 0x21, 0x9e86, &(0x7f0000014040)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file2\x00', 0x2100000, 0x0, 0x0, 0x0, 0x0) 164.432959ms ago: executing program 0 (id=1921): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10.38707ms ago: executing program 3 (id=1922): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100400000009500000000000000bf91000000000000b702000002a000008500000095000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000880)=""/4092, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3d) 0s ago: executing program 5 (id=1923): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0xffff, 0x29, 0x2b}) kernel console output (not intermixed with test programs): : config failed, can't get hub status (err -71) [ 112.723137][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 112.765894][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 112.773257][ T5180] (syz.2.323,5180,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x1fb6df54. Applying ECC. [ 112.810142][ T5180] (syz.2.323,5180,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0xfc4047c [ 112.831863][ T7] usb 4-1: USB disconnect, device number 4 [ 112.851268][ T5180] (syz.2.323,5180,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 112.856044][ T107] [ 112.856044][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.856044][ T107] [ 112.880207][ T5180] (syz.2.323,5180,1):ocfs2_quota_read:201 ERROR: status = -5 [ 112.894937][ T5220] netlink: 28 bytes leftover after parsing attributes in process `syz.4.340'. [ 112.921122][ T5180] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 3 [ 112.961258][ T5180] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 112.979624][ T29] [ 112.979624][ T29] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.979624][ T29] [ 112.983992][ T5180] (syz.2.323,5180,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 113.015726][ T29] [ 113.015726][ T29] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.015726][ T29] [ 113.032792][ T5180] (syz.2.323,5180,1):ocfs2_mknod:314 ERROR: status = -5 [ 113.040990][ T107] [ 113.040990][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.040990][ T107] [ 113.063236][ T5180] (syz.2.323,5180,1):ocfs2_mknod:502 ERROR: status = -5 [ 113.064940][ T4494] [ 113.064940][ T4494] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.064940][ T4494] [ 113.086086][ T5180] (syz.2.323,5180,1):ocfs2_create:676 ERROR: status = -5 [ 113.102342][ T5222] mmap: syz.4.343 (5222) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.125881][ T4494] [ 113.125881][ T4494] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.125881][ T4494] [ 113.302768][ T4260] ocfs2: Unmounting device (7,2) on (node local) [ 113.658838][ T5233] loop5: detected capacity change from 0 to 64 [ 114.072301][ T5246] netlink: 'syz.5.352': attribute type 12 has an invalid length. [ 114.135820][ T5248] loop0: detected capacity change from 0 to 256 [ 114.421949][ T5248] FAT-fs (loop0): Directory bread(block 64) failed [ 114.428607][ T5248] FAT-fs (loop0): Directory bread(block 65) failed [ 114.482288][ T5248] FAT-fs (loop0): Directory bread(block 66) failed [ 114.509777][ T5248] FAT-fs (loop0): Directory bread(block 67) failed [ 114.540764][ T5248] FAT-fs (loop0): Directory bread(block 68) failed [ 114.604102][ T5248] FAT-fs (loop0): Directory bread(block 69) failed [ 114.631487][ T5262] loop5: detected capacity change from 0 to 2048 [ 114.676906][ T5248] FAT-fs (loop0): Directory bread(block 70) failed [ 114.708570][ T5262] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.737144][ T5248] FAT-fs (loop0): Directory bread(block 71) failed [ 114.787150][ T5248] FAT-fs (loop0): Directory bread(block 72) failed [ 114.925620][ T5248] FAT-fs (loop0): Directory bread(block 73) failed [ 114.939476][ T5237] loop3: detected capacity change from 0 to 32768 [ 115.033083][ T5237] read_mapping_page failed! [ 115.038269][ T5237] ialloc: diAlloc returned -5! [ 115.770021][ T4305] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.855668][ T5294] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 115.960277][ T4305] usb 5-1: Using ep0 maxpacket: 16 [ 115.969350][ T4305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 116.006053][ T4305] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 116.038111][ T4305] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 116.080282][ T4305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.088440][ T4305] usb 5-1: Product: syz [ 116.113426][ T4305] usb 5-1: Manufacturer: syz [ 116.133693][ T4305] usb 5-1: SerialNumber: syz [ 116.168650][ T4305] usb 5-1: config 0 descriptor?? [ 116.198399][ T4305] hub 5-1:0.0: bad descriptor, ignoring hub [ 116.230144][ T4305] hub: probe of 5-1:0.0 failed with error -5 [ 116.271091][ T4305] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 116.641695][ T4295] usb 5-1: USB disconnect, device number 2 [ 116.896752][ T5330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.388'. [ 117.423277][ T5347] device netdevsim0 entered promiscuous mode [ 117.499494][ T5347] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 117.794042][ T5352] loop4: detected capacity change from 0 to 4096 [ 117.835408][ T5352] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 117.914852][ T5352] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 117.940647][ T5352] ntfs3: loop4: Failed to load $Extend. [ 117.960121][ T4296] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.150260][ T4296] usb 4-1: Using ep0 maxpacket: 16 [ 118.158001][ T4296] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 118.188674][ T4296] usb 4-1: config 0 has no interface number 0 [ 118.211621][ T4296] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 118.225898][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 118.240013][ T4296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.258678][ T4296] usb 4-1: Product: syz [ 118.268558][ T4296] usb 4-1: Manufacturer: syz [ 118.278702][ T4296] usb 4-1: SerialNumber: syz [ 118.310021][ T4296] usb 4-1: config 0 descriptor?? [ 118.343645][ T4296] hub 4-1:0.132: bad descriptor, ignoring hub [ 118.350098][ T4296] hub: probe of 4-1:0.132 failed with error -5 [ 118.390850][ T4296] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input6 [ 118.780518][ T4305] usb 4-1: USB disconnect, device number 5 [ 118.818312][ T5375] netlink: 72 bytes leftover after parsing attributes in process `syz.4.409'. [ 119.939763][ T5411] loop5: detected capacity change from 0 to 1024 [ 120.018217][ T5411] hfsplus: xattr searching failed [ 120.027589][ T5410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.075367][ T5407] netlink: 44 bytes leftover after parsing attributes in process `syz.4.423'. [ 120.451261][ T5423] loop4: detected capacity change from 0 to 1024 [ 120.467135][ T5425] netlink: 19 bytes leftover after parsing attributes in process `syz.2.428'. [ 120.510141][ T5425] netlink: 19 bytes leftover after parsing attributes in process `syz.2.428'. [ 120.548732][ T5427] netlink: 'syz.3.429': attribute type 10 has an invalid length. [ 120.626781][ T5427] netlink: 40 bytes leftover after parsing attributes in process `syz.3.429'. [ 120.632350][ T5429] loop5: detected capacity change from 0 to 1024 [ 120.800639][ T5427] team0: Port device geneve0 added [ 120.848748][ T5427] syz.3.429 (5427) used greatest stack depth: 18256 bytes left [ 120.929728][ T29] hfsplus: b-tree write err: -5, ino 4 [ 121.777082][ T5466] device netdevsim0 entered promiscuous mode [ 121.817936][ T5466] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 122.221847][ T5485] loop2: detected capacity change from 0 to 8 [ 122.272885][ T5482] loop5: detected capacity change from 0 to 2048 [ 122.310383][ T5482] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 122.358465][ T5490] netlink: 'syz.0.452': attribute type 1 has an invalid length. [ 122.380208][ T5485] SQUASHFS error: Unable to read inode 0xa7 [ 122.421145][ T5492] loop3: detected capacity change from 0 to 64 [ 122.440046][ T5493] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.541920][ T5490] netlink: 224 bytes leftover after parsing attributes in process `syz.0.452'. [ 122.847740][ T5501] netlink: 'syz.3.458': attribute type 2 has an invalid length. [ 123.120818][ T5508] device bond1 entered promiscuous mode [ 123.216602][ T5515] netlink: zone id is out of range [ 123.265441][ T5515] netlink: get zone limit has 4 unknown bytes [ 123.618561][ T5530] loop2: detected capacity change from 0 to 1024 [ 123.688401][ T5530] EXT4-fs: Ignoring removed bh option [ 123.725245][ T5530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.771428][ T5530] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e018, mo2=0000] [ 123.915252][ T5530] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 2: comm syz.2.469: lblock 2 mapped to illegal pblock 2 (length 1) [ 124.026784][ T5530] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 124.078306][ T5530] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 48: comm syz.2.469: lblock 0 mapped to illegal pblock 48 (length 1) [ 124.170209][ T5530] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 124.181545][ T5530] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.469: Failed to acquire dquot type 0 [ 124.238175][ T5530] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 124.337489][ T5530] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.469: mark_inode_dirty error [ 124.379988][ T5530] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 124.417051][ T5530] EXT4-fs (loop2): 1 orphan inode deleted [ 124.430521][ T46] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.475820][ T5530] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 124.523361][ T46] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 124.570287][ T46] EXT4-fs error (device loop2): ext4_release_dquot:6818: comm kworker/u4:3: Failed to release dquot type 0 [ 124.756056][ T4260] EXT4-fs (loop2): unmounting filesystem. [ 124.776680][ T46] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.816107][ T46] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 124.868455][ T46] EXT4-fs error (device loop2): ext4_release_dquot:6818: comm kworker/u4:3: Failed to release dquot type 0 [ 124.910912][ T4260] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 124.958057][ T4260] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 125.005796][ T4260] EXT4-fs error (device loop2): ext4_quota_off:7084: inode #3: comm syz-executor: mark_inode_dirty error [ 125.069716][ T5579] capability: warning: `syz.3.487' uses 32-bit capabilities (legacy support in use) [ 125.247209][ T5589] loop4: detected capacity change from 0 to 64 [ 125.684494][ T5551] loop5: detected capacity change from 0 to 40427 [ 125.784872][ T5551] F2FS-fs (loop5): invalid crc value [ 125.826420][ T5551] F2FS-fs (loop5): Found nat_bits in checkpoint [ 125.977691][ T5612] loop3: detected capacity change from 0 to 64 [ 126.119695][ T5551] F2FS-fs (loop5): recover fsync data on readonly fs [ 126.184035][ T5551] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 126.351044][ T5551] F2FS-fs (loop5): Corrupted max_depth of 3: 1025 [ 126.390300][ T5551] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 126.518035][ T5630] loop2: detected capacity change from 0 to 1024 [ 126.635577][ T5628] loop4: detected capacity change from 0 to 4096 [ 126.700571][ T5628] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 126.764044][ T5628] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 126.856916][ T5628] ntfs: volume version 3.1. [ 126.900688][ T5628] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 126.980106][ T5628] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 127.022103][ T5628] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 127.202004][ T5644] netlink: 'syz.2.506': attribute type 1 has an invalid length. [ 127.549574][ T5626] loop3: detected capacity change from 0 to 32768 [ 127.601953][ T5656] loop4: detected capacity change from 0 to 2048 [ 127.617633][ T5626] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.499 (5626) [ 127.638932][ T5656] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 127.672268][ T5660] netlink: 'syz.5.511': attribute type 10 has an invalid length. [ 127.702312][ T5626] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.768361][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.773243][ T5626] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 127.778601][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.815913][ T5663] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.849560][ T5626] BTRFS info (device loop3): using free space tree [ 127.881227][ T5656] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 127.918958][ T5656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 127.952683][ T5656] Remounting filesystem read-only [ 127.958586][ T5656] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 127.970275][ T5656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 127.989980][ T5656] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 128.002153][ T5656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 128.019734][ T5656] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 128.025854][ T5660] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.031291][ T5656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 128.038256][ T5660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.057790][ T5660] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.065515][ T5660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.077260][ T5656] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 128.107266][ T5656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 128.128646][ T5656] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 128.164383][ T5660] team0: Port device bridge0 added [ 128.220256][ T5626] BTRFS info (device loop3): enabling ssd optimizations [ 128.230213][ T5656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 128.283073][ T5656] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 128.319753][ T5656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 128.337357][ T26] audit: type=1400 audit(1742244237.337:10): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5686 comm="syz.2.513" [ 128.345113][ T5656] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 128.424288][ T4259] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.440203][ T5656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 128.499323][ T5656] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 128.560061][ T5656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 128.674332][ T5656] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 128.720096][ T5656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 128.771445][ T5656] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 128.860111][ T5656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 128.911514][ T5656] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 128.956991][ T5656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 129.008316][ T5656] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 129.040228][ T5656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 129.059234][ T5652] loop0: detected capacity change from 0 to 32768 [ 129.113723][ T5656] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 129.155628][ T5652] jfs_strtoUCS: char2uni returned -36. [ 129.167411][ T5656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 129.189599][ T5652] charset = cp932, char = 0x8b [ 129.213209][ T5656] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 129.269543][ T5656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 129.332909][ T5656] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 129.387052][ T5656] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 129.431669][ T26] audit: type=1800 audit(1742244238.437:11): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.508" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 129.532201][ T5656] syz.4.508 (5656) used greatest stack depth: 17048 bytes left [ 129.973373][ T5731] netlink: 2 bytes leftover after parsing attributes in process `syz.3.528'. [ 130.304632][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 131.005750][ T5765] loop2: detected capacity change from 0 to 2048 [ 131.038540][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.545'. [ 131.060663][ T5765] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.150599][ T5773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.390006][ T126] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 131.583539][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 131.594744][ T126] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 131.633942][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.669538][ T126] usb 3-1: config 0 has no interface number 0 [ 131.696381][ T126] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 131.717995][ T5749] loop0: detected capacity change from 0 to 32768 [ 131.726402][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.756482][ T126] usb 3-1: Product: syz [ 131.757335][ T5749] XFS: ikeep mount option is deprecated. [ 131.797277][ T126] usb 3-1: Manufacturer: syz [ 131.810048][ T5749] XFS: noikeep mount option is deprecated. [ 131.831689][ T126] usb 3-1: SerialNumber: syz [ 131.865845][ T126] usb 3-1: config 0 descriptor?? [ 131.886006][ T126] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 131.900221][ T126] usb 3-1: No valid video chain found. [ 131.917658][ T5805] loop4: detected capacity change from 0 to 256 [ 131.996333][ T5805] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 132.033346][ T5749] XFS (loop0): Mounting V5 Filesystem [ 132.045421][ T5810] netlink: 'syz.5.554': attribute type 1 has an invalid length. [ 132.109319][ T126] usb 3-1: USB disconnect, device number 2 [ 132.187494][ T5749] XFS (loop0): Ending clean mount [ 132.242626][ T5749] XFS (loop0): Quotacheck needed: Please wait. [ 132.250662][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 132.405203][ T5749] XFS (loop0): Quotacheck: Done. [ 132.760954][ T4251] XFS (loop0): Unmounting Filesystem [ 132.902358][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.909801][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.274594][ T5852] loop2: detected capacity change from 0 to 128 [ 133.877031][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 134.357597][ T5881] loop4: detected capacity change from 0 to 4096 [ 134.434526][ T5893] xt_TCPMSS: Only works on TCP SYN packets [ 134.446847][ T5881] ntfs3: loop4: ino=3, Correct links count -> 2. [ 134.466302][ T5881] ntfs3: loop4: Failed to load $Volume. [ 134.540562][ T5140] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.211599][ T5919] device erspan1 entered promiscuous mode [ 135.319093][ T5917] loop5: detected capacity change from 0 to 4096 [ 135.377217][ T5917] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 135.663524][ T5933] netlink: 'syz.2.601': attribute type 10 has an invalid length. [ 135.702397][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.709975][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.713929][ T5930] loop4: detected capacity change from 0 to 4096 [ 135.771475][ T5930] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 135.813199][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.820928][ T5933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.827282][ T5930] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 135.831712][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.843484][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.881373][ T5930] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 135.905043][ T5937] loop3: detected capacity change from 0 to 2048 [ 135.936236][ T5930] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 135.964135][ T5930] ntfs3: loop4: try to read out of volume at offset 0x3fffffc1c00 [ 135.972200][ T5933] team0: Port device bridge0 added [ 136.000734][ T5930] ntfs3: loop4: try to read out of volume at offset 0x3fffffc2c00 [ 136.022045][ T5937] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.603: bad orphan inode 8192 [ 136.069051][ T5930] ntfs3: loop4: try to read out of volume at offset 0x3fffffc4c00 [ 136.124695][ T5930] ntfs3: loop4: try to read out of volume at offset 0x3fffffc8c00 [ 136.147298][ T5937] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 136.186082][ T5930] ntfs3: loop4: try to read out of volume at offset 0x3fffffd0c00 [ 136.212916][ T5930] ntfs3: loop4: try to read out of volume at offset 0x3fffffe0c00 [ 136.263739][ T5950] netlink: 'syz.0.606': attribute type 28 has an invalid length. [ 136.315763][ T5950] netlink: 'syz.0.606': attribute type 3 has an invalid length. [ 136.363747][ T5950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.606'. [ 136.405695][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 136.478030][ T5954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.610'. [ 136.718575][ T52] block nbd0: Attempted send on invalid socket [ 136.726769][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.318913][ T5985] netlink: 'syz.2.624': attribute type 1 has an invalid length. [ 137.691195][ T5994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.800293][ T4296] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.867988][ T5970] loop3: detected capacity change from 0 to 32768 [ 137.956067][ T5970] ERROR: (device loop3): duplicateIXtree: [ 137.956067][ T5970] [ 137.996074][ T5970] ERROR: (device loop3): remounting filesystem as read-only [ 138.003673][ T4296] usb 5-1: Using ep0 maxpacket: 32 [ 138.015212][ T4296] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.042882][ T4296] usb 5-1: config 0 has no interface number 0 [ 138.079847][ T4296] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 138.106281][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.156983][ T4296] usb 5-1: Product: syz [ 138.170149][ T4296] usb 5-1: Manufacturer: syz [ 138.174973][ T4296] usb 5-1: SerialNumber: syz [ 138.192896][ T4296] usb 5-1: config 0 descriptor?? [ 138.213175][ T4296] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 138.247987][ T4296] usb 5-1: selecting invalid altsetting 1 [ 138.254147][ T4296] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 138.271073][ T4296] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 138.295673][ T4296] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 138.321919][ T4296] usb 5-1: media controller created [ 138.356058][ T4296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.394766][ T6008] loop0: detected capacity change from 0 to 4096 [ 138.418222][ T6008] ntfs3: loop0: ino=3, Correct links count -> 2. [ 138.439144][ T6008] ntfs3: loop0: Failed to load $Volume. [ 138.633624][ T4296] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 138.728015][ T4296] usb 5-1: USB disconnect, device number 3 [ 139.307009][ T6038] loop5: detected capacity change from 0 to 1024 [ 139.416163][ T6038] hfsplus: extend alloc file! (16384,256,150995124) [ 139.456039][ T6044] loop4: detected capacity change from 0 to 128 [ 139.660234][ T4296] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.700338][ T129] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 139.880355][ T4296] usb 1-1: Using ep0 maxpacket: 8 [ 139.887523][ T4296] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 139.899983][ T129] usb 3-1: Using ep0 maxpacket: 32 [ 139.906974][ T129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 139.937474][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.948953][ T129] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 139.962782][ T6058] netlink: 56 bytes leftover after parsing attributes in process `syz.4.661'. [ 139.982726][ T4296] usb 1-1: config 0 descriptor?? [ 140.000029][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.016523][ T129] usb 3-1: Product: syz [ 140.021396][ T6058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.661'. [ 140.031291][ T129] usb 3-1: Manufacturer: syz [ 140.036671][ T129] usb 3-1: SerialNumber: syz [ 140.042631][ T6058] netlink: 35 bytes leftover after parsing attributes in process `syz.4.661'. [ 140.063356][ T129] usb 3-1: config 0 descriptor?? [ 140.079658][ T129] hub 3-1:0.0: bad descriptor, ignoring hub [ 140.085916][ T6058] netlink: 'syz.4.661': attribute type 3 has an invalid length. [ 140.095310][ T129] hub: probe of 3-1:0.0 failed with error -5 [ 140.102051][ T6058] netlink: 'syz.4.661': attribute type 2 has an invalid length. [ 140.132261][ T129] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 140.165696][ T129] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 140.205798][ T129] usbtouchscreen: probe of 3-1:0.0 failed with error -8 [ 140.220097][ T4296] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 140.320896][ T129] usb 3-1: USB disconnect, device number 3 [ 140.436909][ T4296] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 140.462195][ T4296] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 140.487675][ T4296] asix: probe of 1-1:0.0 failed with error -71 [ 140.506510][ T4296] usb 1-1: USB disconnect, device number 2 [ 140.533523][ T6050] loop3: detected capacity change from 0 to 32768 [ 140.575717][ T6050] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.658 (6050) [ 140.653768][ T6050] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.694916][ T6050] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 140.718789][ T6050] BTRFS info (device loop3): using free space tree [ 141.131342][ T6050] BTRFS info (device loop3): enabling ssd optimizations [ 141.178138][ T6097] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 141.210283][ T129] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 141.350153][ T4259] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.416496][ T6104] ip6t_REJECT: ECHOREPLY is not supported [ 141.421338][ T129] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 141.450006][ T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.488097][ T129] usb 6-1: config 0 descriptor?? [ 141.518480][ T129] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 141.709563][ T6114] kernel read not supported for file / œÏüÔ¢W)ëS“§Ç-ë (pid: 6114 comm: syz.0.680) [ 141.750200][ T26] audit: type=1800 audit(1742244250.757:12): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.680" name=20019CCFFCD4A25729EB5393A7C72DEB dev="mqueue" ino=39338 res=0 errno=0 [ 141.894741][ T6116] loop4: detected capacity change from 0 to 1024 [ 141.951115][ T129] gspca_sunplus: reg_w_riv err -71 [ 141.956432][ T129] sunplus: probe of 6-1:0.0 failed with error -71 [ 141.990193][ T129] usb 6-1: USB disconnect, device number 3 [ 142.144800][ T11] hfsplus: b-tree write err: -5, ino 4 [ 142.654448][ T6134] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.742227][ T6134] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.780174][ T6134] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.816123][ T6144] loop3: detected capacity change from 0 to 256 [ 142.822719][ T6134] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.823038][ T6134] device geneve2 entered promiscuous mode [ 142.913001][ T6134] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 142.954981][ T6144] FAT-fs (loop3): Directory bread(block 64) failed [ 142.960186][ T6134] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 142.994701][ T6144] FAT-fs (loop3): Directory bread(block 65) failed [ 143.000289][ T6134] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 143.015232][ T6144] FAT-fs (loop3): Directory bread(block 66) failed [ 143.040345][ T6134] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 143.045876][ T6144] FAT-fs (loop3): Directory bread(block 67) failed [ 143.059677][ T6144] FAT-fs (loop3): Directory bread(block 68) failed [ 143.071301][ T6144] FAT-fs (loop3): Directory bread(block 69) failed [ 143.079169][ T6144] FAT-fs (loop3): Directory bread(block 70) failed [ 143.098173][ T6144] FAT-fs (loop3): Directory bread(block 71) failed [ 143.108877][ T6144] FAT-fs (loop3): Directory bread(block 72) failed [ 143.126545][ T6144] FAT-fs (loop3): Directory bread(block 73) failed [ 143.189883][ T6148] netlink: 'syz.0.702': attribute type 1 has an invalid length. [ 143.445877][ T6157] netlink: 168 bytes leftover after parsing attributes in process `syz.5.693'. [ 143.518805][ T6159] loop0: detected capacity change from 0 to 1024 [ 143.611389][ T6159] hfsplus: request for non-existent node 65280 in B*Tree [ 143.630993][ T6164] loop4: detected capacity change from 0 to 1024 [ 143.640164][ T6159] hfsplus: request for non-existent node 65280 in B*Tree [ 143.811166][ T29] hfsplus: b-tree write err: -5, ino 4 [ 143.856229][ T11] hfsplus: b-tree write err: -5, ino 4 [ 143.995390][ T6173] loop4: detected capacity change from 0 to 256 [ 144.084577][ T6173] exfat: Deprecated parameter 'namecase' [ 144.158097][ T6173] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 144.206286][ T6178] loop5: detected capacity change from 0 to 512 [ 144.240939][ T6178] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 144.290041][ T6178] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 144.321605][ T6181] netlink: 'syz.0.704': attribute type 10 has an invalid length. [ 144.341240][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.348983][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.438450][ T6178] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.703: corrupted in-inode xattr [ 144.469403][ T6150] loop2: detected capacity change from 0 to 32768 [ 144.476980][ T6150] XFS: ikeep mount option is deprecated. [ 144.483655][ T6150] XFS: noikeep mount option is deprecated. [ 144.486236][ T6181] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.497648][ T6181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.506701][ T6181] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.514057][ T6181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.546188][ T6178] EXT4-fs (loop5): Remounting filesystem read-only [ 144.557941][ T6150] XFS (loop2): Mounting V5 Filesystem [ 144.574625][ T6178] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 144.600299][ T6178] EXT4-fs (loop5): 1 truncate cleaned up [ 144.601982][ T6181] team0: Port device bridge0 added [ 144.605994][ T6178] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 144.700663][ T6195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.774347][ T4494] EXT4-fs (loop5): unmounting filesystem. [ 144.885188][ T6150] XFS (loop2): Ending clean mount [ 144.923664][ T6150] XFS (loop2): Quotacheck needed: Please wait. [ 145.042021][ T6150] XFS (loop2): Quotacheck: Done. [ 145.307264][ T4260] XFS (loop2): Unmounting Filesystem [ 145.312472][ T4938] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 145.520115][ T4938] usb 5-1: Using ep0 maxpacket: 16 [ 145.537475][ T4938] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 145.578978][ T4938] usb 5-1: config 0 has no interface number 0 [ 145.616885][ T4938] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 145.649977][ T4938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.678474][ T4938] usb 5-1: Product: syz [ 145.686651][ T4938] usb 5-1: Manufacturer: syz [ 145.710020][ T4938] usb 5-1: SerialNumber: syz [ 145.752893][ T4938] usb 5-1: config 0 descriptor?? [ 145.781159][ T4938] hub 5-1:0.132: bad descriptor, ignoring hub [ 145.787315][ T4938] hub: probe of 5-1:0.132 failed with error -5 [ 145.859473][ T4938] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input9 [ 145.921718][ T6237] netlink: 'syz.3.722': attribute type 10 has an invalid length. [ 145.953288][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.960871][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.016663][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.024280][ T6237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.034150][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.041357][ T6237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.188134][ T6237] team0: Port device bridge0 added [ 146.200457][ T27] usb 5-1: USB disconnect, device number 4 [ 146.241873][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.251667][ T6244] loop5: detected capacity change from 0 to 1024 [ 146.547092][ T6257] loop2: detected capacity change from 0 to 64 [ 146.923885][ T6272] erofs: (device loop9): erofs_read_superblock: cannot find valid erofs superblock [ 146.961715][ T6267] device bond1 entered promiscuous mode [ 147.025746][ T6267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.200066][ T4938] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.400110][ T4938] usb 3-1: Using ep0 maxpacket: 32 [ 147.415557][ T4938] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.458673][ T4938] usb 3-1: config 0 has no interface number 0 [ 147.482580][ T4938] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 147.493383][ T6290] loop5: detected capacity change from 0 to 1024 [ 147.510083][ T4938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.538899][ T4938] usb 3-1: Product: syz [ 147.550937][ T6290] EXT4-fs: Ignoring removed orlov option [ 147.559645][ T4938] usb 3-1: Manufacturer: syz [ 147.579104][ T4938] usb 3-1: SerialNumber: syz [ 147.589224][ T6290] EXT4-fs: Ignoring removed orlov option [ 147.603626][ T4938] usb 3-1: config 0 descriptor?? [ 147.625840][ T4938] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 147.651304][ T6290] EXT4-fs: Ignoring removed oldalloc option [ 147.668735][ T4938] usb 3-1: selecting invalid altsetting 1 [ 147.689002][ T6290] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 147.706222][ T4938] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 147.730780][ T4938] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 147.741440][ T6290] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 147.758870][ T4938] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 147.788249][ T6290] EXT4-fs (loop5): invalid journal inode [ 147.794253][ T4938] usb 3-1: media controller created [ 147.799677][ T6290] EXT4-fs (loop5): can't get journal size [ 147.846780][ T6290] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 147.856615][ T4938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.868961][ T6300] loop4: detected capacity change from 0 to 64 [ 147.871180][ T6297] loop0: detected capacity change from 0 to 2048 [ 147.938447][ T6301] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.995724][ T4494] EXT4-fs (loop5): unmounting filesystem. [ 148.191217][ T4938] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 148.193817][ T6303] loop4: detected capacity change from 0 to 1024 [ 148.290120][ T6303] hfsplus: request for non-existent node 65280 in B*Tree [ 148.349432][ T4938] usb 3-1: USB disconnect, device number 4 [ 148.350581][ T6303] hfsplus: request for non-existent node 65280 in B*Tree [ 148.480084][ T6309] openvswitch: netlink: Key type 29 is not supported [ 148.516330][ T9] hfsplus: b-tree write err: -5, ino 4 [ 148.988460][ T6327] ieee802154 phy0 wpan0: encryption failed: -22 [ 150.632630][ T6373] loop5: detected capacity change from 0 to 256 [ 150.673609][ T6346] loop4: detected capacity change from 0 to 32768 [ 150.674185][ T6373] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 150.815753][ T6375] loop0: detected capacity change from 0 to 4096 [ 150.895261][ T6375] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 150.950089][ T6375] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 150.958001][ T6375] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 151.017438][ T6375] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 151.040596][ T6375] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 151.068905][ T6375] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 151.077328][ T6375] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 151.116210][ T6375] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 151.134617][ T6375] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 151.153908][ T6375] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00 [ 151.344546][ T26] audit: type=1326 audit(1742244260.347:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089e98d169 code=0x7ffc0000 [ 151.367194][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.414503][ T26] audit: type=1326 audit(1742244260.387:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089e98d169 code=0x7ffc0000 [ 151.562914][ T26] audit: type=1326 audit(1742244260.387:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f089e98d169 code=0x7ffc0000 [ 151.615340][ T6390] netlink: 'syz.3.790': attribute type 2 has an invalid length. [ 151.674773][ T26] audit: type=1326 audit(1742244260.387:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089e98d169 code=0x7ffc0000 [ 151.760097][ T26] audit: type=1326 audit(1742244260.387:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089e98d169 code=0x7ffc0000 [ 152.068816][ T6381] loop5: detected capacity change from 0 to 32768 [ 152.165024][ T6381] XFS (loop5): Mounting V5 Filesystem [ 152.321427][ T6381] XFS (loop5): Ending clean mount [ 152.374967][ T6381] XFS (loop5): Quotacheck needed: Please wait. [ 152.449871][ T6381] XFS (loop5): Quotacheck: Done. [ 152.498692][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 152.737926][ T4494] XFS (loop5): Unmounting Filesystem [ 152.925603][ T6398] loop0: detected capacity change from 0 to 32768 [ 153.040021][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.226640][ T6439] netlink: 'syz.5.806': attribute type 3 has an invalid length. [ 153.240264][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 153.249123][ T6441] netlink: 'syz.3.812': attribute type 4 has an invalid length. [ 153.249758][ T6439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.258602][ T6441] netlink: 'syz.3.812': attribute type 3 has an invalid length. [ 153.280985][ T27] usb 3-1: config 0 has no interfaces? [ 153.287559][ T6441] netlink: 132 bytes leftover after parsing attributes in process `syz.3.812'. [ 153.301098][ T27] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 153.311204][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.320322][ T27] usb 3-1: Product: syz [ 153.348995][ T27] usb 3-1: Manufacturer: syz [ 153.360197][ T27] usb 3-1: SerialNumber: syz [ 153.373600][ T27] r8152-cfgselector 3-1: config 0 descriptor?? [ 153.645884][ T27] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 153.733827][ T6451] loop5: detected capacity change from 0 to 1024 [ 153.747834][ T6451] EXT4-fs: Ignoring removed orlov option [ 153.780032][ T6451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.800760][ T6451] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.873410][ T27] usb 3-1: USB disconnect, device number 5 [ 153.897943][ T6451] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 153.951367][ T6451] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 154.242379][ T6466] QAT: Stopping all acceleration devices. [ 154.284041][ T4494] EXT4-fs (loop5): unmounting filesystem. [ 154.400713][ T6454] loop4: detected capacity change from 0 to 32768 [ 154.477326][ T6454] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 154.477326][ T6454] [ 154.528500][ T6454] ERROR: (device loop4): remounting filesystem as read-only [ 154.563446][ T6476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.827'. [ 154.572643][ T6454] ERROR: (device loop4): jfs_unlink: [ 154.572643][ T6454] [ 154.600082][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 154.703677][ T4255] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 154.703677][ T4255] [ 154.884725][ T6482] netlink: 20 bytes leftover after parsing attributes in process `syz.5.830'. [ 155.010111][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 155.230102][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 155.238460][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 155.289649][ T27] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 155.319395][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.358303][ T27] usb 1-1: Product: syz [ 155.370226][ T27] usb 1-1: Manufacturer: syz [ 155.380410][ T27] usb 1-1: SerialNumber: syz [ 155.401209][ T27] usb 1-1: config 0 descriptor?? [ 155.430449][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 155.442750][ T27] hub: probe of 1-1:0.0 failed with error -5 [ 155.472199][ T27] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 155.492560][ T27] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 155.521355][ T27] usbtouchscreen: probe of 1-1:0.0 failed with error -8 [ 155.742424][ T4297] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 155.800974][ T129] usb 1-1: USB disconnect, device number 3 [ 155.848562][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.843'. [ 155.960128][ T4297] usb 6-1: Using ep0 maxpacket: 16 [ 155.976032][ T4297] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 156.036923][ T4297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.063986][ T6526] loop3: detected capacity change from 0 to 64 [ 156.079772][ T4297] usb 6-1: Product: syz [ 156.107683][ T4297] usb 6-1: Manufacturer: syz [ 156.135141][ T4297] usb 6-1: SerialNumber: syz [ 156.160723][ T4297] usb 6-1: config 0 descriptor?? [ 156.260378][ T4297] as10x_usb: device has been detected [ 156.266284][ T4297] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 156.368164][ T4297] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 156.398524][ T6502] random: crng reseeded on system resumption [ 156.554384][ T4297] as10x_usb: error during firmware upload part1 [ 156.579770][ T4297] Registered device Sky IT Digital Key (green led) [ 156.796806][ T6548] netlink: 'syz.4.859': attribute type 11 has an invalid length. [ 157.292672][ T6562] ufs: Invalid option: "Ûàßä0…(áeêªLüêd9(@ ûŸÀ8ìL´)uH\dKzLVÚÁR<%ï5rÆŒËze ~I2~ [ 157.292672][ T6562] r0Rpyëhå:ã‰ÝèÖY³‡ [ 157.292672][ T6562] òO©÷‰\›z«Y" or missing value [ 157.380708][ T6562] ufs: wrong mount options [ 157.533279][ T6572] loop2: detected capacity change from 0 to 64 [ 157.558254][ T129] usb 6-1: USB disconnect, device number 4 [ 157.637956][ T129] Unregistered device Sky IT Digital Key (green led) [ 157.641206][ T129] as10x_usb: device has been disconnected [ 158.491664][ T6570] loop4: detected capacity change from 0 to 32768 [ 158.593379][ T6570] XFS (loop4): Mounting V5 Filesystem [ 158.734688][ T6570] XFS (loop4): Ending clean mount [ 158.778733][ T6570] XFS (loop4): Quotacheck needed: Please wait. [ 158.861330][ T6578] loop2: detected capacity change from 0 to 32768 [ 158.885606][ T6570] XFS (loop4): Quotacheck: Done. [ 158.907262][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 158.969159][ T6578] XFS (loop2): Mounting V5 Filesystem [ 159.166133][ T4255] XFS (loop4): Unmounting Filesystem [ 159.179572][ T6578] XFS (loop2): Ending clean mount [ 159.192793][ T6624] loop3: detected capacity change from 0 to 8 [ 159.356049][ T6624] SQUASHFS error: Failed to read block 0xdfa: -5 [ 159.380597][ T6624] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 159.501184][ T6624] SQUASHFS error: Failed to read block 0x4e8: -5 [ 159.551024][ T6624] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 159.585562][ T6624] SQUASHFS error: Failed to read block 0x4de: -5 [ 159.599657][ T6624] SQUASHFS error: Failed to read block 0x4de: -5 [ 159.619493][ T4260] XFS (loop2): Unmounting Filesystem [ 159.646731][ T6624] SQUASHFS error: Failed to read block 0x4de: -5 [ 159.657982][ T6624] SQUASHFS error: Failed to read block 0x4de: -5 [ 159.677100][ T6624] SQUASHFS error: Failed to read block 0x4de: -5 [ 159.695841][ T6624] SQUASHFS error: Failed to read block 0x4de: -5 [ 159.703154][ T6624] SQUASHFS error: Failed to read block 0x4e8: -5 [ 159.718003][ T26] audit: type=1800 audit(1742244268.717:18): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.888" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 159.881010][ T6633] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 160.298621][ T6644] tc_dump_action: action bad kind [ 161.050141][ T4297] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 161.261914][ T4297] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 161.293739][ T4297] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 161.326178][ T4297] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 161.345908][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.815190][ T4297] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 161.834322][ T4297] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input11 [ 161.867944][ T4297] input: failed to attach handler kbd to device input11, error: -5 [ 161.950184][ T4297] usb 3-1: USB disconnect, device number 6 [ 162.010115][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.220200][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 162.228373][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.269412][ T27] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 162.289020][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.307384][ T27] usb 5-1: Product: syz [ 162.343582][ T27] usb 5-1: Manufacturer: syz [ 162.348258][ T27] usb 5-1: SerialNumber: syz [ 162.375836][ T27] usb 5-1: config 0 descriptor?? [ 162.391960][ T27] usb 5-1: bad CDC descriptors [ 162.417745][ T27] usb 5-1: unsupported MDLM descriptors [ 162.613582][ T4937] usb 5-1: USB disconnect, device number 5 [ 162.673401][ T6701] loop3: detected capacity change from 0 to 32768 [ 162.711938][ T6719] loop5: detected capacity change from 0 to 256 [ 162.768846][ T6701] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 162.821015][ T6701] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 162.847073][ T6701] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 162.857437][ T6701] OCFS2: File system is now read-only. [ 162.863157][ T6701] (syz.3.926,6701,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 162.880210][ T6701] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 162.941864][ T6701] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 162.984780][ T6701] (syz.3.926,6701,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 163.029630][ T6701] (syz.3.926,6701,0):ocfs2_mknod:502 ERROR: status = -30 [ 163.037553][ T6701] (syz.3.926,6701,0):ocfs2_create:676 ERROR: status = -30 [ 163.118486][ T4259] ocfs2: Unmounting device (7,3) on (node local) [ 163.322137][ T6735] loop0: detected capacity change from 0 to 512 [ 163.337564][ T6734] netlink: 'syz.5.943': attribute type 10 has an invalid length. [ 163.401277][ T6734] team0: Device hsr_slave_0 failed to register rx_handler [ 163.441135][ T6735] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 163.540233][ T6735] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.772690][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 163.887780][ T6748] loop2: detected capacity change from 0 to 4096 [ 163.905664][ T6748] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 163.950266][ T6754] loop4: detected capacity change from 0 to 256 [ 164.271581][ T6756] loop5: detected capacity change from 0 to 4096 [ 164.400537][ T6760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.953'. [ 164.444785][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 164.467121][ T6742] loop3: detected capacity change from 0 to 32768 [ 164.614145][ T6742] XFS (loop3): Mounting V5 Filesystem [ 164.692175][ T6773] loop0: detected capacity change from 0 to 4096 [ 164.703404][ T6773] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 164.891510][ T6742] XFS (loop3): Ending clean mount [ 164.907894][ T6742] XFS (loop3): Quotacheck needed: Please wait. [ 165.061392][ T6742] XFS (loop3): Quotacheck: Done. [ 165.242331][ T4259] XFS (loop3): Unmounting Filesystem [ 165.366114][ T6794] loop0: detected capacity change from 0 to 256 [ 165.610303][ T6800] netlink: 188 bytes leftover after parsing attributes in process `syz.5.970'. [ 165.619371][ T6800] ksmbd: Unknown IPC event: 10, ignore. [ 165.691611][ T6802] loop0: detected capacity change from 0 to 512 [ 165.870182][ T6802] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 165.887708][ T6802] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.017817][ T6815] loop5: detected capacity change from 0 to 128 [ 166.127719][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 166.447949][ T6831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.983'. [ 166.813260][ T6837] loop3: detected capacity change from 0 to 4096 [ 166.873619][ T6837] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 166.887221][ T6846] loop4: detected capacity change from 0 to 512 [ 166.909585][ T6846] EXT4-fs: Ignoring removed i_version option [ 166.966170][ T6846] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.066226][ T6846] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.990: inode #13: comm syz.4.990: iget: illegal inode # [ 167.101490][ T6846] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.990: couldn't read orphan inode 13 (err -117) [ 167.130489][ T6846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 167.258378][ T6846] EXT4-fs error (device loop4): __ext4_remount:6611: comm syz.4.990: Abort forced by user [ 167.296087][ T6846] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 167.344964][ T6861] loop3: detected capacity change from 0 to 512 [ 167.376924][ T6861] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.408938][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 167.429451][ T6861] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 167.445951][ T6861] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.996: invalid indirect mapped block 2683928664 (level 1) [ 167.526863][ T6861] EXT4-fs (loop3): Remounting filesystem read-only [ 167.575982][ T6861] EXT4-fs (loop3): 1 truncate cleaned up [ 167.582006][ T6861] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 167.772615][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 168.175783][ T6890] netlink: 'syz.0.1011': attribute type 2 has an invalid length. [ 168.425924][ T6903] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 168.600730][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 168.720070][ T4297] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 168.826533][ T6918] tipc: Can't bind to reserved service type 2 [ 168.900139][ T5697] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 168.912810][ T4297] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.926450][ T4297] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.963520][ T4297] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.985021][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.003671][ T4297] usb 1-1: Product: syz [ 169.013110][ T4297] usb 1-1: Manufacturer: syz [ 169.030117][ T4297] usb 1-1: SerialNumber: syz [ 169.096850][ T5697] usb 4-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 169.129635][ T5697] usb 4-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.155072][ T5697] usb 4-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 169.176170][ T5697] usb 4-1: config 1 interface 0 has no altsetting 0 [ 169.220827][ T5697] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 169.251162][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.263350][ T5697] usb 4-1: Product: syz [ 169.271794][ T4297] usb 1-1: 0:2 : does not exist [ 169.278403][ T5697] usb 4-1: Manufacturer: syz [ 169.292833][ T5697] usb 4-1: SerialNumber: syz [ 169.292935][ T4297] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 169.368331][ T4297] usb 1-1: USB disconnect, device number 4 [ 169.514637][ T6936] loop4: detected capacity change from 0 to 16 [ 169.551934][ T5697] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 169.583017][ T6936] erofs: (device loop4): mounted with root inode @ nid 36. [ 169.608082][ T5697] usb 4-1: USB disconnect, device number 6 [ 169.620879][ T4732] udevd[4732]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.657404][ T5697] usblp0: removed [ 169.867079][ T6944] loop4: detected capacity change from 0 to 64 [ 170.222763][ T6956] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 170.588366][ T6972] xt_hashlimit: invalid interval [ 170.800048][ T4937] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 171.002149][ T4937] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 171.028343][ T4937] usb 6-1: config 0 has no interface number 0 [ 171.043668][ T4937] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 171.073240][ T4937] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 171.091938][ T4297] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 171.101106][ T4937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.120108][ T4937] usb 6-1: Product: syz [ 171.124511][ T4937] usb 6-1: Manufacturer: syz [ 171.131574][ T4937] usb 6-1: SerialNumber: syz [ 171.152471][ T4937] usb 6-1: config 0 descriptor?? [ 171.159334][ T6969] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 171.172727][ T4937] usb-storage 6-1:0.20: USB Mass Storage device detected [ 171.240725][ T4937] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 171.289979][ T4297] usb 1-1: Using ep0 maxpacket: 32 [ 171.297048][ T4297] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 171.319122][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.330461][ T4297] usb 1-1: config 0 descriptor?? [ 171.343438][ T4297] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 171.405871][ T4937] scsi host1: usb-storage 6-1:0.20 [ 171.464039][ T7002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.471908][ T7002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.548761][ T6999] loop4: detected capacity change from 0 to 4096 [ 171.601492][ T4937] usb 6-1: USB disconnect, device number 5 [ 171.757634][ T4297] gspca_nw80x: reg_r err -71 [ 171.764026][ T4297] nw80x: probe of 1-1:0.0 failed with error -71 [ 171.781757][ T4297] usb 1-1: USB disconnect, device number 5 [ 172.522861][ T7033] libceph: resolve '400' (ret=-3): failed [ 173.520805][ T26] audit: type=1326 audit(1742244282.527:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7065 comm="syz.3.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78158d169 code=0x7ffc0000 [ 173.593564][ T7042] loop4: detected capacity change from 0 to 32768 [ 173.596106][ T26] audit: type=1326 audit(1742244282.557:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7065 comm="syz.3.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fa78158d169 code=0x7ffc0000 [ 173.698925][ T26] audit: type=1326 audit(1742244282.557:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7065 comm="syz.3.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78158d169 code=0x7ffc0000 [ 173.711284][ T7042] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 173.721724][ T26] audit: type=1326 audit(1742244282.557:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7065 comm="syz.3.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78158d169 code=0x7ffc0000 [ 173.864677][ T7079] loop2: detected capacity change from 0 to 512 [ 173.876828][ T7079] EXT4-fs: Ignoring removed oldalloc option [ 173.889567][ T7042] (syz.4.1083,7042,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 173.958120][ T7079] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 173.967531][ T7079] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.021757][ T4255] ocfs2: Unmounting device (7,4) on (node local) [ 174.070359][ T7050] loop5: detected capacity change from 0 to 32768 [ 174.111140][ T4260] EXT4-fs (loop2): unmounting filesystem. [ 174.165691][ T7050] ea_get: invalid extended attribute [ 174.510861][ T7094] tmpfs: Bad value for 'mpol' [ 174.803216][ T7100] loop3: detected capacity change from 0 to 2048 [ 174.860383][ T7100] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.974334][ T7081] loop0: detected capacity change from 0 to 32768 [ 175.099760][ T7081] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 175.125139][ T7114] loop2: detected capacity change from 0 to 256 [ 175.149323][ T7081] (syz.0.1100,7081,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 175.190791][ T7081] (syz.0.1100,7081,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 175.237408][ T7081] (syz.0.1100,7081,0):ocfs2_mknod:502 ERROR: status = -117 [ 175.408409][ T7123] netlink: 'syz.3.1119': attribute type 4 has an invalid length. [ 175.419283][ T4251] ocfs2: Unmounting device (7,0) on (node local) [ 175.438041][ T7123] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1119'. [ 175.813109][ T7131] loop2: detected capacity change from 0 to 256 [ 175.918196][ T7131] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 176.325452][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 176.404148][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.421673][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.238641][ T7181] loop4: detected capacity change from 0 to 1024 [ 177.300609][ T4940] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 177.440098][ T4470] hfsplus: b-tree write err: -5, ino 4 [ 177.490184][ T4940] usb 4-1: Using ep0 maxpacket: 16 [ 177.502402][ T4940] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 177.527939][ T4940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.549240][ T4940] usb 4-1: Product: syz [ 177.549290][ T7187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.567064][ T4940] usb 4-1: Manufacturer: syz [ 177.582259][ T4940] usb 4-1: SerialNumber: syz [ 177.603767][ T4940] usb 4-1: config 0 descriptor?? [ 177.611838][ T7187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.640666][ T7187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.649643][ T4940] as10x_usb: device has been detected [ 177.672815][ T4940] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 177.708420][ T7169] loop0: detected capacity change from 0 to 32768 [ 177.753511][ T4940] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 177.807422][ T4940] as10x_usb: error during firmware upload part1 [ 177.819348][ T4940] Registered device Sky IT Digital Key (green led) [ 177.840879][ T7173] random: crng reseeded on system resumption [ 177.841532][ T7169] ea_get: invalid extended attribute [ 177.902295][ T7169] ffff888073c1f230: 04 00 00 00 .... [ 178.158767][ T7198] loop5: detected capacity change from 0 to 1024 [ 178.202749][ T7198] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.281921][ T7198] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 178.328317][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 178.537593][ T4494] EXT4-fs (loop5): unmounting filesystem. [ 178.750685][ T7215] loop0: detected capacity change from 0 to 16 [ 178.798566][ T7215] erofs: (device loop0): mounted with root inode @ nid 36. [ 178.832222][ T7219] netlink: 'syz.2.1165': attribute type 10 has an invalid length. [ 178.953026][ T4297] usb 4-1: USB disconnect, device number 7 [ 178.986787][ T4297] Unregistered device Sky IT Digital Key (green led) [ 179.000862][ T4297] as10x_usb: device has been disconnected [ 179.874771][ T7254] loop5: detected capacity change from 0 to 512 [ 179.923131][ T7254] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 179.965353][ T7254] UDF-fs: Scanning with blocksize 512 failed [ 179.977249][ T7258] netlink: 'syz.3.1182': attribute type 16 has an invalid length. [ 179.995741][ T7258] netlink: 'syz.3.1182': attribute type 17 has an invalid length. [ 180.033160][ T7254] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 180.034281][ T7258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.050693][ T7258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.060794][ T7254] UDF-fs: Scanning with blocksize 1024 failed [ 180.072183][ T7254] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 180.079611][ T7254] UDF-fs: Scanning with blocksize 2048 failed [ 180.089154][ T7260] loop2: detected capacity change from 0 to 256 [ 180.095409][ T7258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.109253][ T7260] FAT-fs (loop2): Directory bread(block 1285) failed [ 180.132773][ T7258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.141066][ T7254] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 180.163290][ T7260] FAT-fs (loop2): Directory bread(block 1285) failed [ 180.199162][ T7260] FAT-fs (loop2): Directory bread(block 1285) failed [ 180.209017][ T7254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.228392][ T7260] FAT-fs (loop2): Directory bread(block 1285) failed [ 180.245921][ T7262] rdma_rxe: rxe creation allowed on top of a real device only [ 180.829840][ T7273] loop3: detected capacity change from 0 to 4096 [ 180.948581][ T7273] ntfs: volume version 3.1. [ 181.161834][ T7287] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 181.433913][ T7297] loop2: detected capacity change from 0 to 1024 [ 182.144816][ T7319] loop3: detected capacity change from 0 to 512 [ 182.161615][ T7319] EXT4-fs: Ignoring removed orlov option [ 182.181984][ T7321] xt_policy: too many policy elements [ 182.198461][ T7319] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.226925][ T7324] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 182.247440][ T7319] EXT4-fs (loop3): orphan cleanup on readonly fs [ 182.251017][ T7289] loop5: detected capacity change from 0 to 32768 [ 182.264630][ T7324] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 182.274495][ T7324] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 182.297627][ T7319] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1213: bg 0: block 248: padding at end of block bitmap is not set [ 182.320842][ T7319] Quota error (device loop3): write_blk: dquota write failed [ 182.350508][ T7319] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 182.363049][ T7319] EXT4-fs error (device loop3): ext4_acquire_dquot:6795: comm syz.3.1213: Failed to acquire dquot type 1 [ 182.387328][ T7319] EXT4-fs (loop3): 1 truncate cleaned up [ 182.416233][ T7319] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 182.452755][ T7319] EXT4-fs: Ignoring removed orlov option [ 182.468900][ T7319] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.496860][ T7319] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 182.520228][ T4938] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 182.550471][ T7319] EXT4-fs error (device loop3): __ext4_remount:6611: comm syz.3.1213: Abort forced by user [ 182.571546][ T7319] EXT4-fs (loop3): Remounting filesystem read-only [ 182.595707][ T7319] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 182.611813][ T7319] ext4 filesystem being remounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.700544][ T7333] loop5: detected capacity change from 0 to 64 [ 182.716316][ T4938] usb 1-1: Using ep0 maxpacket: 32 [ 182.724630][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 182.756360][ T4938] usb 1-1: unable to get BOS descriptor or descriptor too short [ 182.806151][ T4938] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 182.840895][ T4938] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 182.860771][ T4938] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 182.871459][ T4938] usb 1-1: config 128 has no interface number 0 [ 182.877794][ T4938] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 182.896701][ T4938] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.908136][ T4938] usb 1-1: config 128 interface 127 has no altsetting 0 [ 182.930571][ T4938] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 182.950674][ T4938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.958732][ T4938] usb 1-1: Product: syz [ 182.963649][ T4938] usb 1-1: Manufacturer: syz [ 182.968298][ T4938] usb 1-1: SerialNumber: syz [ 183.305205][ T4938] usb 1-1: USB disconnect, device number 6 [ 183.555505][ T5140] udevd[5140]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.725584][ T7357] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.955212][ T7363] netlink: 'syz.0.1233': attribute type 21 has an invalid length. [ 184.248293][ T7375] loop5: detected capacity change from 0 to 16 [ 184.280638][ T7375] erofs: (device loop5): mounted with root inode @ nid 36. [ 184.968821][ T7402] netlink: 'syz.2.1252': attribute type 16 has an invalid length. [ 185.177370][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1254'. [ 185.214787][ T4938] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 185.236175][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1254'. [ 185.260048][ T7406] netlink: 'syz.4.1254': attribute type 6 has an invalid length. [ 185.400057][ T4938] usb 4-1: Using ep0 maxpacket: 16 [ 185.416686][ T4938] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 185.456556][ T4938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.498079][ T4938] usb 4-1: Product: syz [ 185.518374][ T4938] usb 4-1: Manufacturer: syz [ 185.540474][ T4938] usb 4-1: SerialNumber: syz [ 185.564311][ T4938] r8152-cfgselector 4-1: config 0 descriptor?? [ 185.608376][ T7408] could not allocate digest TFM handle sha256-arm64-neon [ 186.007626][ T4938] r8152-cfgselector 4-1: Unknown version 0x0000 [ 186.018810][ T4938] r8152-cfgselector 4-1: USB disconnect, device number 8 [ 186.193687][ T7445] binder: BC_ATTEMPT_ACQUIRE not supported [ 186.226871][ T7445] binder: 7444:7445 ioctl c0306201 400000000380 returned -22 [ 186.250585][ T2169] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 186.429133][ T7453] tmpfs: Bad value for 'mpol' [ 186.440082][ T2169] usb 6-1: Using ep0 maxpacket: 16 [ 186.448405][ T2169] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 186.478056][ T2169] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.509419][ T2169] usb 6-1: config 0 descriptor?? [ 186.531439][ T2169] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 186.720231][ T7461] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1280'. [ 186.831091][ T7465] loop2: detected capacity change from 0 to 1024 [ 186.935763][ T2169] gspca_sonixj: reg_r err -71 [ 186.940694][ T2169] sonixj: probe of 6-1:0.0 failed with error -71 [ 186.951258][ T7465] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 186.964446][ T2169] usb 6-1: USB disconnect, device number 6 [ 187.150323][ T4260] EXT4-fs (loop2): unmounting filesystem. [ 187.257184][ T7475] loop0: detected capacity change from 0 to 1024 [ 187.315992][ T7477] loop2: detected capacity change from 0 to 256 [ 187.334071][ T7475] hfsplus: extend alloc file! (8192,512,16777719) [ 187.394322][ T7477] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 187.450607][ T7477] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 187.607313][ T7459] loop4: detected capacity change from 0 to 32768 [ 187.683527][ T7459] ERROR: (device loop4): dtSearch: stack overrun! [ 187.683527][ T7459] [ 187.700298][ T7484] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1291'. [ 187.719469][ T7459] ERROR: (device loop4): remounting filesystem as read-only [ 187.737159][ T7484] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1291'. [ 187.746225][ T7459] btstack dump: [ 187.759052][ T7459] bn = 0, index = 4 [ 187.777399][ T7459] bn = 0, index = 4 [ 187.792669][ T7484] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1291'. [ 187.819983][ T7459] bn = 0, index = 4 [ 187.823867][ T7459] bn = 0, index = 4 [ 187.827706][ T7459] bn = 0, index = 4 [ 187.847136][ T7484] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 187.890627][ T7459] bn = 0, index = 4 [ 187.894501][ T7459] bn = 0, index = 4 [ 187.899148][ T7459] bn = 0, index = 0 [ 187.920319][ T7459] jfs_lookup: dtSearch returned -5 [ 188.446472][ T7507] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1303'. [ 188.711426][ T7519] loop4: detected capacity change from 0 to 16 [ 188.750391][ T7519] erofs: (device loop4): mounted with root inode @ nid 36. [ 188.784907][ T7519] loop4: Can't mount, would change RO state [ 189.145547][ T7527] loop3: detected capacity change from 0 to 4096 [ 189.198201][ T7527] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 189.245531][ T7527] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 189.310085][ T7527] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 189.326816][ T7537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1315'. [ 189.346863][ T7527] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 189.402906][ T7527] ntfs: volume version 3.1. [ 189.900538][ T7523] loop0: detected capacity change from 0 to 32768 [ 189.945645][ T7553] netlink: 'syz.2.1323': attribute type 24 has an invalid length. [ 190.385423][ T7561] loop3: detected capacity change from 0 to 4096 [ 190.407323][ T7561] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.437804][ T7561] EXT4-fs (loop3): Test dummy encryption mode enabled [ 190.493589][ T7561] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 190.556879][ T7561] EXT4-fs (loop3): unmounting filesystem. [ 190.759790][ T7582] QAT: Invalid ioctl 1075883590 [ 190.786304][ T7582] QAT: Invalid ioctl 1075883590 [ 190.806806][ T7582] QAT: Invalid ioctl 1075883590 [ 190.836153][ T7582] QAT: Invalid ioctl 1075883590 [ 190.872707][ T7582] QAT: Invalid ioctl 1075883590 [ 190.880814][ T7582] QAT: Invalid ioctl 1075883590 [ 190.900132][ T7582] QAT: Invalid ioctl 1075883590 [ 190.905156][ T7582] QAT: Invalid ioctl 1075883590 [ 190.936126][ T7587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1340'. [ 190.940103][ T7582] QAT: Invalid ioctl 1075883590 [ 191.004833][ T7582] QAT: Invalid ioctl 1075883590 [ 191.420048][ T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 191.630712][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 191.645797][ T27] usb 4-1: New USB device found, idVendor=2c42, idProduct=1608, bcdDevice=57.fa [ 191.680483][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.689328][ T27] usb 4-1: Product: syz [ 191.720152][ T27] usb 4-1: Manufacturer: syz [ 191.724837][ T27] usb 4-1: SerialNumber: syz [ 191.762925][ T27] usb 4-1: config 0 descriptor?? [ 191.783377][ T27] f81232 4-1:0.0: f81534a converter detected [ 191.979326][ T27] usb 4-1: f81534a converter now attached to ttyUSB0 [ 192.200738][ T4940] usb 4-1: USB disconnect, device number 9 [ 192.246600][ T4940] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 192.277297][ T4940] f81232 4-1:0.0: device disconnected [ 192.604232][ T7637] loop5: detected capacity change from 0 to 4096 [ 192.798253][ T7645] loop2: detected capacity change from 0 to 512 [ 192.858862][ T7645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.967479][ T7645] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.020125][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1371'. [ 193.029598][ T7645] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.266737][ T4260] EXT4-fs (loop2): unmounting filesystem. [ 193.274484][ T7667] cgroup: name respecified [ 193.588066][ T7677] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 193.854354][ T7687] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 193.878164][ T7690] loop3: detected capacity change from 0 to 1024 [ 194.138082][ T7695] loop5: detected capacity change from 0 to 1024 [ 194.197281][ T7700] loop3: detected capacity change from 0 to 256 [ 194.225016][ T7701] loop0: detected capacity change from 0 to 64 [ 194.227273][ T7703] loop4: detected capacity change from 0 to 256 [ 194.274442][ T7700] FAT-fs (loop3): Directory bread(block 64) failed [ 194.295346][ T7703] exfat: Deprecated parameter 'namecase' [ 194.306903][ T7700] FAT-fs (loop3): Directory bread(block 65) failed [ 194.315604][ T7703] exfat: Deprecated parameter 'namecase' [ 194.345870][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.360735][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.395097][ T7700] FAT-fs (loop3): Directory bread(block 66) failed [ 194.425242][ T7700] FAT-fs (loop3): Directory bread(block 67) failed [ 194.450308][ T7700] FAT-fs (loop3): Directory bread(block 68) failed [ 194.459235][ T7703] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 194.468094][ T7700] FAT-fs (loop3): Directory bread(block 69) failed [ 194.488600][ T7700] FAT-fs (loop3): Directory bread(block 70) failed [ 194.496991][ T7707] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1397'. [ 194.498639][ T7700] FAT-fs (loop3): Directory bread(block 71) failed [ 194.573463][ T7700] FAT-fs (loop3): Directory bread(block 72) failed [ 194.595230][ T7700] FAT-fs (loop3): Directory bread(block 73) failed [ 194.752826][ T7713] xt_cgroup: xt_cgroup: no path or classid specified [ 194.905753][ T7717] loop2: detected capacity change from 0 to 2048 [ 195.029355][ T7727] netlink: 'syz.0.1407': attribute type 49 has an invalid length. [ 195.035128][ T7717] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 195.092160][ T7717] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.223408][ T7734] netlink: 2980 bytes leftover after parsing attributes in process `syz.0.1409'. [ 195.302758][ T4260] EXT4-fs (loop2): unmounting filesystem. [ 196.006421][ T26] audit: type=1326 audit(1742244305.007:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716038d169 code=0x7ffc0000 [ 196.087770][ T26] audit: type=1326 audit(1742244305.057:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f716038d169 code=0x7ffc0000 [ 196.165963][ T26] audit: type=1326 audit(1742244305.057:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716038d169 code=0x7ffc0000 [ 196.242979][ T7771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1427'. [ 196.273924][ T26] audit: type=1326 audit(1742244305.057:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716038d169 code=0x7ffc0000 [ 196.274031][ T7772] netlink: 'syz.0.1428': attribute type 4 has an invalid length. [ 196.669275][ T7786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1435'. [ 196.875533][ T7795] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 196.917973][ T7797] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 197.056310][ T7801] sctp: [Deprecated]: syz.5.1442 (pid 7801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.056310][ T7801] Use struct sctp_sack_info instead [ 197.987842][ T7827] device bond3 entered promiscuous mode [ 197.995197][ T7788] loop0: detected capacity change from 0 to 40427 [ 198.005582][ T7827] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.010451][ T7832] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 198.022237][ T7832] overlayfs: missing 'lowerdir' [ 198.044550][ T7788] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 198.073875][ T7788] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 198.132583][ T7788] F2FS-fs (loop0): invalid crc value [ 198.190167][ T7788] F2FS-fs (loop0): Found nat_bits in checkpoint [ 198.306475][ T7788] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 198.313812][ T7788] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 198.442192][ T7827] bond3 (unregistering): Released all slaves [ 198.531699][ T4251] syz-executor: attempt to access beyond end of device [ 198.531699][ T4251] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.703110][ T7849] device batadv0 entered promiscuous mode [ 198.945358][ T7856] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1468'. [ 199.026746][ T7858] binder: 7857:7858 ioctl c018620c 400000000000 returned -1 [ 199.543608][ T7867] loop3: detected capacity change from 0 to 4096 [ 199.581543][ T7868] loop0: detected capacity change from 0 to 4096 [ 199.588016][ T7867] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 199.599974][ T27] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 199.730373][ T7852] loop4: detected capacity change from 0 to 32768 [ 199.752307][ T7867] ntfs3: loop3: failed to convert "c46c" to macgaelic [ 199.800116][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 199.809361][ T27] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 199.846894][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.866516][ T27] usb 6-1: Product: syz [ 199.887319][ T27] usb 6-1: Manufacturer: syz [ 199.896936][ T27] usb 6-1: SerialNumber: syz [ 199.909596][ T27] r8152-cfgselector 6-1: config 0 descriptor?? [ 200.338217][ T27] r8152-cfgselector 6-1: Unknown version 0x0000 [ 200.349424][ T27] r8152-cfgselector 6-1: bad CDC descriptors [ 200.364376][ T7882] xt_CT: No such helper "netbios-ns" [ 200.384647][ T27] r8152-cfgselector 6-1: Unknown version 0x0000 [ 200.428823][ T27] r8152-cfgselector 6-1: USB disconnect, device number 7 [ 200.715278][ T7897] loop4: detected capacity change from 0 to 512 [ 200.808224][ T7897] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.1479: bad orphan inode 13 [ 200.885758][ T7897] ext4_test_bit(bit=12, block=4) = 1 [ 200.891330][ T7897] is_bad_inode(inode)=0 [ 200.895530][ T7897] NEXT_ORPHAN(inode)=0 [ 200.899621][ T7897] max_ino=32 [ 200.904306][ T7897] i_nlink=1 [ 200.907534][ T7897] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 200.922623][ T7897] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.1479: Unrecognised inode hash code 20 [ 200.980106][ T7897] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1479: Corrupt directory, running e2fsck is recommended [ 201.008149][ T7897] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 201.021594][ T7909] netlink: 'syz.5.1492': attribute type 5 has an invalid length. [ 201.039741][ T7909] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1492'. [ 201.173550][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 201.540539][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 201.546783][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 201.553237][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 201.553257][ T4258] Bluetooth: hci3: command 0x0406 tx timeout [ 201.586509][ T7923] tmpfs: Bad value for 'mpol' [ 201.953372][ T7903] loop0: detected capacity change from 0 to 32768 [ 202.007996][ T7903] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1490 (7903) [ 202.067480][ T7903] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 202.093361][ T7903] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 202.175912][ T7903] BTRFS info (device loop0): using free space tree [ 202.229232][ T7911] loop2: detected capacity change from 0 to 32768 [ 202.235979][ T7944] loop3: detected capacity change from 0 to 256 [ 202.247497][ T7944] exfat: Deprecated parameter 'namecase' [ 202.282655][ T7911] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1493 (7911) [ 202.296371][ T7944] exfat: Deprecated parameter 'namecase' [ 202.320189][ T7911] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.340121][ T7911] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 202.357476][ T7911] BTRFS info (device loop2): using free space tree [ 202.392426][ T7944] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 202.608523][ T7903] BTRFS info (device loop0): enabling ssd optimizations [ 202.722024][ T7969] loop5: detected capacity change from 0 to 2048 [ 202.729996][ T7911] BTRFS info (device loop2): enabling ssd optimizations [ 202.755924][ T7969] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 202.808796][ T4251] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 202.820968][ T7984] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.935216][ T4260] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.998570][ T7988] loop4: detected capacity change from 0 to 64 [ 203.299979][ T7989] nvme_fabrics: missing parameter 'transport=%s' [ 203.307332][ T7989] nvme_fabrics: missing parameter 'nqn=%s' [ 203.570254][ T8002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1510'. [ 203.940437][ T8016] netlink: 'syz.2.1520': attribute type 3 has an invalid length. [ 204.148723][ T8018] loop5: detected capacity change from 0 to 4096 [ 204.334905][ T8028] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.572376][ T8033] loop4: detected capacity change from 0 to 64 [ 204.964774][ T8046] loop2: detected capacity change from 0 to 512 [ 205.011960][ T8046] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.107881][ T8046] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 205.209984][ T7992] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 205.214909][ T8057] loop0: detected capacity change from 0 to 256 [ 205.331505][ T8057] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 205.399968][ T7992] usb 4-1: Using ep0 maxpacket: 16 [ 205.407370][ T7992] usb 4-1: config 4 has an invalid interface number: 9 but max is 0 [ 205.432912][ T7992] usb 4-1: config 4 has no interface number 0 [ 205.440255][ T7992] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 205.479985][ T7992] usb 4-1: config 4 interface 9 has no altsetting 0 [ 205.508278][ T7992] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 205.530941][ T4260] EXT4-fs (loop2): unmounting filesystem. [ 205.536912][ T7992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.555460][ T7992] usb 4-1: Product: syz [ 205.560487][ T7992] usb 4-1: Manufacturer: syz [ 205.570214][ T7992] usb 4-1: SerialNumber: syz [ 205.596985][ T8048] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 205.675647][ T7992] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 205.920834][ T4300] usb 4-1: Failed to submit usb control message: -71 [ 205.921032][ T4294] usb 4-1: USB disconnect, device number 10 [ 205.935124][ T4300] usb 4-1: unable to send the bmi data to the device: -71 [ 205.974916][ T4300] usb 4-1: unable to get target info from device [ 205.994580][ T4300] usb 4-1: could not get target info (-71) [ 206.015372][ T4300] usb 4-1: could not probe fw (-71) [ 206.173688][ T8074] loop5: detected capacity change from 0 to 4096 [ 206.286938][ T8074] ntfs: volume version 3.1. [ 206.324618][ T8085] loop2: detected capacity change from 0 to 256 [ 206.429484][ T8085] FAT-fs (loop2): Directory bread(block 64) failed [ 206.450102][ T8085] FAT-fs (loop2): Directory bread(block 65) failed [ 206.456794][ T8085] FAT-fs (loop2): Directory bread(block 66) failed [ 206.477805][ T8085] FAT-fs (loop2): Directory bread(block 67) failed [ 206.550074][ T8085] FAT-fs (loop2): Directory bread(block 68) failed [ 206.556673][ T8085] FAT-fs (loop2): Directory bread(block 69) failed [ 206.595741][ T8085] FAT-fs (loop2): Directory bread(block 70) failed [ 206.609620][ T8085] FAT-fs (loop2): Directory bread(block 71) failed [ 206.650107][ T8085] FAT-fs (loop2): Directory bread(block 72) failed [ 206.660603][ T8085] FAT-fs (loop2): Directory bread(block 73) failed [ 207.535603][ T8118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1568'. [ 207.833832][ T8128] loop2: detected capacity change from 0 to 764 [ 207.897463][ T8128] rock: directory entry would overflow storage [ 207.916376][ T8128] rock: sig=0x5850, size=36, remaining=7 [ 207.934956][ T8130] loop5: detected capacity change from 0 to 2048 [ 207.970067][ T126] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 207.980635][ T8130] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.080118][ T7992] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 208.173967][ T126] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 208.200059][ T126] usb 5-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 208.229773][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.282385][ T7992] usb 4-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 208.325654][ T7992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 97, changing to 10 [ 208.326112][ T126] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 208.350577][ T7992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24677, setting to 1024 [ 208.372310][ T7992] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.403898][ T7992] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 208.433654][ T5140] udevd[5140]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.444452][ T7992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.491133][ T8144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1580'. [ 208.511207][ T7992] usb 4-1: config 0 descriptor?? [ 208.524774][ T126] usb 5-1: USB disconnect, device number 6 [ 208.653338][ T8151] xt_limit: Overflow, try lower: 65536/2147483648 [ 208.720269][ T7992] ath6kl: Failed to submit usb control message: -71 [ 208.736899][ T7992] ath6kl: unable to send the bmi data to the device: -71 [ 208.744348][ T7992] ath6kl: Unable to send get target info: -71 [ 208.752552][ T7992] ath6kl: Failed to init ath6kl core: -71 [ 208.773503][ T8153] loop2: detected capacity change from 0 to 256 [ 208.823815][ T8153] exFAT-fs (loop2): bogus fat length [ 208.829549][ T7992] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 208.839793][ T8153] exFAT-fs (loop2): failed to read boot sector [ 208.869762][ T7992] usb 4-1: USB disconnect, device number 11 [ 208.871233][ T8153] exFAT-fs (loop2): failed to recognize exfat type [ 209.101910][ T8162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1589'. [ 209.126345][ T8162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1589'. [ 209.156045][ T8162] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 209.224012][ T8163] loop0: detected capacity change from 0 to 4096 [ 209.258247][ T8162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 209.266711][ T8163] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 209.419039][ T8163] ntfs3: loop0: failed to convert "c46c" to euc-jp [ 209.802962][ T8182] loop2: detected capacity change from 0 to 128 [ 209.911314][ T8182] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 210.082703][ T8188] loop5: detected capacity change from 0 to 256 [ 210.121651][ T46] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 210.760334][ T8206] netlink: 'syz.5.1610': attribute type 3 has an invalid length. [ 210.768131][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1610'. [ 210.794631][ T8172] loop4: detected capacity change from 0 to 32768 [ 210.807582][ T8208] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 210.860283][ T8208] [U] J"—e:ÀÆ" [ 210.974157][ T8172] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 211.189962][ T8172] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 3630 but max bitmap bits of 2048 [ 211.243700][ T8172] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 211.278120][ T8172] OCFS2: File system is now read-only. [ 211.305726][ T8172] (syz.4.1593,8172,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 211.330095][ T8172] (syz.4.1593,8172,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 211.368962][ T8172] (syz.4.1593,8172,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 211.384332][ T8222] netlink: 'syz.2.1617': attribute type 16 has an invalid length. [ 211.398152][ T8172] (syz.4.1593,8172,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 211.407978][ T8222] netlink: 'syz.2.1617': attribute type 3 has an invalid length. [ 211.439515][ T8172] (syz.4.1593,8172,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 211.448553][ T8222] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1617'. [ 211.468129][ T8172] (syz.4.1593,8172,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 211.482564][ T8172] (syz.4.1593,8172,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 211.507491][ T8172] (syz.4.1593,8172,1):ocfs2_mknod:385 ERROR: status = -30 [ 211.556716][ T8172] (syz.4.1593,8172,1):ocfs2_mknod:502 ERROR: status = -30 [ 211.576683][ T8172] (syz.4.1593,8172,1):ocfs2_create:676 ERROR: status = -30 [ 211.687759][ T4255] (syz-executor,4255,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 211.701385][ T8228] loop5: detected capacity change from 0 to 2048 [ 211.721421][ T4255] ocfs2: Unmounting device (7,4) on (node local) [ 211.759556][ T8214] loop3: detected capacity change from 0 to 32768 [ 211.780045][ T4265] Bluetooth: hci0: command 0x0406 tx timeout [ 211.786993][ T8228] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 211.815031][ T8214] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1613 (8214) [ 211.862914][ T8228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.900820][ T8214] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.920484][ T8214] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 211.939556][ T8214] BTRFS info (device loop3): allowing degraded mounts [ 211.980025][ T8214] BTRFS info (device loop3): turning on sync discard [ 212.021689][ T8214] BTRFS info (device loop3): turning on async discard [ 212.028530][ T8214] BTRFS info (device loop3): using free space tree [ 212.426550][ T8226] loop0: detected capacity change from 0 to 32768 [ 212.429696][ T8214] BTRFS info (device loop3: state M): allowing degraded mounts [ 212.480184][ T8214] BTRFS info (device loop3: state M): turning on sync discard [ 212.510935][ T8214] BTRFS info (device loop3: state M): turning on async discard [ 212.563600][ T8226] XFS (loop0): Mounting V5 Filesystem [ 212.676958][ T4259] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.760667][ T8226] XFS (loop0): Ending clean mount [ 212.774514][ T8273] loop5: detected capacity change from 0 to 4096 [ 212.781505][ T8226] XFS (loop0): Quotacheck needed: Please wait. [ 212.805123][ T8273] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 212.858898][ T8275] xt_l2tp: unknown flags: 17 [ 212.886776][ T8226] XFS (loop0): Quotacheck: Done. [ 212.972157][ T8273] ntfs: volume version 3.1. [ 213.077376][ T8273] ntfs: (device loop5): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 213.221996][ T4251] XFS (loop0): Unmounting Filesystem [ 213.518091][ T8286] loop2: detected capacity change from 0 to 1764 [ 214.108439][ T8303] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1644'. [ 214.196495][ T8308] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1645'. [ 214.209436][ T8309] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1646'. [ 214.282703][ T8305] loop0: detected capacity change from 0 to 8192 [ 214.351523][ T8305] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 214.460045][ T8305] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 214.474293][ T8305] REISERFS (device loop0): using ordered data mode [ 214.485525][ T8305] reiserfs: using flush barriers [ 214.500346][ T8305] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 214.556644][ T8305] REISERFS (device loop0): checking transaction log (loop0) [ 214.589388][ T8305] REISERFS (device loop0): Using r5 hash to sort names [ 214.613821][ T8305] REISERFS (device loop0): using 3.5.x disk format [ 214.637919][ T8305] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 214.715725][ T8324] netlink: 'syz.5.1654': attribute type 5 has an invalid length. [ 214.749517][ T8324] device ip6erspan0 entered promiscuous mode [ 214.977018][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 215.016160][ T8329] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1655'. [ 215.036365][ T8329] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 215.189991][ T4298] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 215.381893][ T4298] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 215.404419][ T4298] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 215.450582][ T4298] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 215.489990][ T4298] usb 3-1: config 8 has no interface number 0 [ 215.506472][ T4298] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 215.532224][ T8350] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 215.542010][ T4298] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.568695][ T4298] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 215.609237][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.641126][ T4298] usb 3-1: Product: syz [ 215.645346][ T4298] usb 3-1: Manufacturer: syz [ 215.672169][ T8352] loop4: detected capacity change from 0 to 1764 [ 215.689211][ T4298] usb 3-1: SerialNumber: syz [ 215.946276][ T4298] usb 3-1: USB disconnect, device number 7 [ 216.318803][ T8374] 8021q: VLANs not supported on lo [ 216.393992][ T8376] loop3: detected capacity change from 0 to 2048 [ 216.488721][ T8376] Alternate GPT is invalid, using primary GPT. [ 216.526676][ T8376] loop3: p2 p3 p7 [ 216.590952][ T8382] netlink: 'syz.0.1682': attribute type 2 has an invalid length. [ 216.827783][ T8390] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 216.880328][ T7992] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 216.899752][ T5140] udevd[5140]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 216.925328][ T4732] udevd[4732]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 216.925636][ T5136] udevd[5136]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 217.070329][ T7992] usb 5-1: Using ep0 maxpacket: 32 [ 217.092603][ T7992] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 217.125587][ T7992] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 217.131824][ T8398] loop2: detected capacity change from 0 to 512 [ 217.151051][ T8398] ext4: Unknown parameter 'noacl' [ 217.157378][ T7992] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 217.197320][ T7992] usb 5-1: config 1 has no interface number 0 [ 217.210045][ T7992] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.230592][ T5140] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 217.232452][ T7992] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.309987][ T7992] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 217.355857][ T7992] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 217.365427][ T7992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.410906][ T7992] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 217.597824][ T7992] snd_usb_pod 5-1:1.1: cannot start listening: -90 [ 217.606923][ T7992] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 217.630242][ T7992] snd_usb_pod: probe of 5-1:1.1 failed with error -90 [ 217.740745][ T8420] xt_TCPMSS: Only works on TCP SYN packets [ 217.809594][ T7992] usb 5-1: USB disconnect, device number 7 [ 217.975179][ T8428] xt_hashlimit: max too large, truncated to 1048576 [ 218.386106][ T8442] loop3: detected capacity change from 0 to 256 [ 218.446008][ T8442] MINIX-fs: mounting file system with errors, running fsck is recommended [ 218.623117][ T8449] netlink: 'syz.5.1714': attribute type 8 has an invalid length. [ 218.825001][ T8454] loop2: detected capacity change from 0 to 256 [ 218.884705][ T8424] loop0: detected capacity change from 0 to 32768 [ 218.917055][ T8454] FAT-fs (loop2): Directory bread(block 64) failed [ 218.933992][ T8454] FAT-fs (loop2): Directory bread(block 65) failed [ 218.952790][ T8454] FAT-fs (loop2): Directory bread(block 66) failed [ 218.968268][ T8454] FAT-fs (loop2): Directory bread(block 67) failed [ 218.997220][ T8454] FAT-fs (loop2): Directory bread(block 68) failed [ 219.017214][ T8454] FAT-fs (loop2): Directory bread(block 69) failed [ 219.024292][ T8454] FAT-fs (loop2): Directory bread(block 70) failed [ 219.032528][ T8454] FAT-fs (loop2): Directory bread(block 71) failed [ 219.039715][ T8454] FAT-fs (loop2): Directory bread(block 72) failed [ 219.052078][ T8454] FAT-fs (loop2): Directory bread(block 73) failed [ 219.080425][ T8424] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 219.130889][ T8424] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 256 but claims that 2046 are free [ 219.167437][ T8424] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 219.198759][ T8424] OCFS2: File system is now read-only. [ 219.227580][ T8424] (syz.0.1703,8424,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 219.237168][ T26] audit: type=1326 audit(1742244328.237:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78158d169 code=0x7ffc0000 [ 219.291470][ T8424] (syz.0.1703,8424,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 219.299370][ T8424] (syz.0.1703,8424,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 219.309060][ T26] audit: type=1326 audit(1742244328.237:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78158d169 code=0x7ffc0000 [ 219.397976][ T8424] (syz.0.1703,8424,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 219.424983][ T8424] (syz.0.1703,8424,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 219.426708][ T26] audit: type=1326 audit(1742244328.277:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fa78158d169 code=0x7ffc0000 [ 219.466549][ T26] audit: type=1326 audit(1742244328.277:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78158d169 code=0x7ffc0000 [ 219.479643][ T8424] (syz.0.1703,8424,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 219.504004][ T26] audit: type=1326 audit(1742244328.277:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.3.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78158d169 code=0x7ffc0000 [ 219.518919][ T8472] loop2: detected capacity change from 0 to 164 [ 219.546505][ T8424] (syz.0.1703,8424,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 219.575464][ T8424] (syz.0.1703,8424,1):ocfs2_mknod:385 ERROR: status = -30 [ 219.589504][ T8472] Unable to read rock-ridge attributes [ 219.630482][ T8424] (syz.0.1703,8424,1):ocfs2_mknod:502 ERROR: status = -30 [ 219.638660][ T8424] (syz.0.1703,8424,1):ocfs2_create:676 ERROR: status = -30 [ 219.656547][ T8472] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 219.703676][ T8477] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 219.781432][ T4251] ocfs2: Unmounting device (7,0) on (node local) [ 220.013752][ T8488] loop3: detected capacity change from 0 to 512 [ 220.050057][ T8488] EXT4-fs: Ignoring removed i_version option [ 220.056584][ T8488] EXT4-fs: Ignoring removed orlov option [ 220.095302][ T8488] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 220.180817][ T8488] EXT4-fs (loop3): 1 truncate cleaned up [ 220.186550][ T8488] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 220.233789][ T8488] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:300: inode #15: comm syz.3.1734: verity file has no extents [ 220.320089][ T8488] EXT4-fs (loop3): Remounting filesystem read-only [ 220.356150][ T8488] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 220.567130][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 221.194562][ T8533] loop2: detected capacity change from 0 to 512 [ 221.213200][ T8531] loop5: detected capacity change from 0 to 1024 [ 221.261389][ T8534] loop4: detected capacity change from 0 to 128 [ 221.271886][ T8533] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.312160][ T8533] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 221.332032][ T8534] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 221.370116][ T8533] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 221.378175][ T8533] System zones: 1-12 [ 221.387550][ T8534] syz.4.1755: attempt to access beyond end of device [ 221.387550][ T8534] loop4: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 221.391387][ T8537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1757'. [ 221.412937][ T8537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 221.456445][ T8534] Buffer I/O error on dev loop4, logical block 3245768, async page read [ 221.468750][ T8533] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.1753: corrupted in-inode xattr [ 221.494393][ T8533] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1753: couldn't read orphan inode 15 (err -117) [ 221.531452][ T8533] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 221.569374][ T29] hfsplus: b-tree write err: -5, ino 4 [ 221.589610][ T4255] sysv_free_block: flc_count > flc_size [ 221.610280][ T4255] sysv_free_block: flc_count > flc_size [ 221.615897][ T4255] sysv_free_block: flc_count > flc_size [ 221.641740][ T4255] sysv_free_block: flc_count > flc_size [ 221.647406][ T4255] sysv_free_block: flc_count > flc_size [ 221.680783][ T4255] sysv_free_block: flc_count > flc_size [ 221.686482][ T4255] sysv_free_block: flc_count > flc_size [ 221.709833][ T4255] sysv_free_block: flc_count > flc_size [ 221.721345][ T4255] sysv_free_block: flc_count > flc_size [ 221.727066][ T4255] sysv_free_block: flc_count > flc_size [ 221.739050][ T4255] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 221.774910][ T4260] EXT4-fs (loop2): unmounting filesystem. [ 221.858090][ T8546] loop3: detected capacity change from 0 to 512 [ 221.918754][ T8546] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #16: comm syz.3.1761: casefold flag without casefold feature [ 221.966784][ T8555] netlink: 'syz.4.1764': attribute type 1 has an invalid length. [ 221.975004][ T8555] netlink: 'syz.4.1764': attribute type 2 has an invalid length. [ 221.984609][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1764'. [ 222.070024][ T8546] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1761: couldn't read orphan inode 16 (err -117) [ 222.212702][ T8546] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 222.272695][ T8546] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.481568][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 222.670671][ T8573] loop5: detected capacity change from 0 to 1024 [ 222.804228][ T8573] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 222.814305][ T8579] loop0: detected capacity change from 0 to 256 [ 222.827618][ T8573] hfsplus: cannot replace xattr [ 223.589293][ T8569] loop2: detected capacity change from 0 to 32768 [ 223.673423][ T8569] XFS (loop2): Mounting V5 Filesystem [ 223.712709][ T8609] loop4: detected capacity change from 0 to 64 [ 223.775493][ T8609] Trying to free block not in datazone [ 223.786969][ T8609] Trying to free block not in datazone [ 223.800981][ T8609] Trying to free block not in datazone [ 223.816930][ T8609] Trying to free block not in datazone [ 223.827103][ T8609] Trying to free block not in datazone [ 223.834698][ T8587] loop5: detected capacity change from 0 to 40427 [ 223.844885][ T8609] minix_free_block (loop4:6): bit already cleared [ 223.857252][ T8609] Trying to free block not in datazone [ 223.863765][ T8587] F2FS-fs (loop5): invalid crc value [ 223.867308][ T8569] XFS (loop2): Ending clean mount [ 223.893862][ T8569] XFS (loop2): Quotacheck needed: Please wait. [ 223.933699][ T8587] F2FS-fs (loop5): Found nat_bits in checkpoint [ 223.976580][ T46] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x336/0xfb0, inode 0x424 dinode [ 224.042993][ T46] XFS (loop2): Unmount and run xfs_repair [ 224.065823][ T46] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 224.067643][ T8616] loop0: detected capacity change from 0 to 512 [ 224.101890][ T46] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 224.140312][ T8587] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 224.149407][ T46] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 224.160726][ T46] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 224.167448][ T8616] EXT4-fs: Ignoring removed orlov option [ 224.169608][ T46] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 04 1a 4.Xh............ [ 224.240170][ T46] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 224.256505][ T8616] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 224.270012][ T46] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 11 ad c0 55 ...............U [ 224.292071][ T8616] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 224.305943][ T8616] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1789: Corrupt directory, running e2fsck is recommended [ 224.359999][ T46] 00000060: ff ff ff ff de 0a af 16 00 00 00 00 00 07 00 00 ................ [ 224.389350][ T46] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 224.510629][ T8569] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 224.521580][ T8628] Unsupported ieee802154 address type: 0 [ 224.535187][ T8616] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 224.550172][ T8616] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.1789: corrupted in-inode xattr [ 224.600259][ T8616] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1789: couldn't read orphan inode 15 (err -117) [ 224.625457][ T8569] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x336/0xfb0, inode 0x424 dinode [ 224.657285][ T8616] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 224.657704][ T8569] XFS (loop2): Unmount and run xfs_repair [ 224.691726][ T8569] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 224.736031][ T8569] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 224.778700][ T8569] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 224.810038][ T8569] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 224.823374][ T8616] EXT4-fs error (device loop0): ext4_xattr_set_entry:1619: inode #2: comm syz.0.1789: corrupted xattr entries [ 224.837531][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1798'. [ 224.859491][ T8569] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 04 1a 4.Xh............ [ 224.869105][ T8569] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 224.893305][ T8569] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 11 ad c0 55 ...............U [ 224.910464][ T8569] 00000060: ff ff ff ff de 0a af 16 00 00 00 00 00 07 00 00 ................ [ 224.940049][ T8569] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 225.073573][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 225.176631][ T4260] XFS (loop2): Unmounting Filesystem [ 225.453327][ T8644] loop3: detected capacity change from 0 to 512 [ 225.491550][ T8644] EXT4-fs: Ignoring removed mblk_io_submit option [ 225.585894][ T8644] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 225.677357][ T8644] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 225.692058][ T8644] System zones: 1-12 [ 225.705573][ T8644] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.1802: corrupted in-inode xattr [ 225.810517][ T8644] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1802: couldn't read orphan inode 15 (err -117) [ 225.838699][ T8653] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1805'. [ 225.848607][ T8644] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 225.946502][ T8657] libceph: resolve '40.' (ret=-3): failed [ 226.070838][ T8636] loop4: detected capacity change from 0 to 32768 [ 226.096089][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 226.750170][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 226.942006][ T27] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 226.959957][ T27] usb 3-1: config 0 has no interface number 1 [ 226.966274][ T27] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 226.999737][ T27] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 227.038758][ T27] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 227.069985][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 227.078608][ T27] usb 3-1: SerialNumber: syz [ 227.155012][ T27] usb 3-1: config 0 descriptor?? [ 227.209254][ T27] usb 3-1: Found UVC 0.00 device (0002:0000) [ 227.217937][ T27] usb 3-1: No valid video chain found. [ 227.438215][ T8280] usb 3-1: USB disconnect, device number 8 [ 227.812104][ T8717] loop3: detected capacity change from 0 to 64 [ 227.859795][ T8720] loop0: detected capacity change from 0 to 256 [ 227.922082][ T8720] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 227.963123][ T8720] FAT-fs (loop0): Filesystem has been set read-only [ 228.158656][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1842'. [ 228.276203][ T8735] loop0: detected capacity change from 0 to 512 [ 228.318560][ T8735] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 228.436751][ T8735] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 228.450476][ T8735] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.575155][ T8744] loop5: detected capacity change from 0 to 1764 [ 228.736123][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 229.827077][ T8791] loop0: detected capacity change from 0 to 256 [ 229.866007][ T8785] loop4: detected capacity change from 0 to 4096 [ 229.883065][ T8793] netlink: 'syz.3.1870': attribute type 12 has an invalid length. [ 229.917959][ T8793] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 229.938280][ T8791] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x750b7e54, utbl_chksum : 0xe619d30d) [ 229.946882][ T8785] ntfs: (device loop4): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 229.972202][ T8785] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 230.047980][ T8791] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 230.057584][ T8785] ntfs: volume version 3.1. [ 230.078268][ T8791] exFAT-fs (loop0): Filesystem has been set read-only [ 230.093621][ T8785] ntfs: (device loop4): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 230.130033][ T8785] ntfs: (device loop4): map_mft_record(): Failed with error code 5. [ 230.145286][ T8785] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 230.196584][ T8785] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 230.306210][ T8785] ntfs: (device loop4): ntfs_read_locked_inode(): Index block size (0) < NTFS_BLOCK_SIZE (512) is not supported. Sorry. [ 230.385775][ T8785] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -95. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 231.048848][ T8831] loop2: detected capacity change from 0 to 64 [ 231.230093][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 231.295761][ T8835] netlink: 'syz.5.1894': attribute type 6 has an invalid length. [ 231.449991][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 231.457211][ T27] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 231.496604][ T27] usb 4-1: config 0 has no interface number 0 [ 231.516937][ T27] usb 4-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.581652][ T27] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 231.609978][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.649670][ T27] usb 4-1: Product: syz [ 231.654966][ T27] usb 4-1: Manufacturer: syz [ 231.659613][ T27] usb 4-1: SerialNumber: syz [ 231.701522][ T27] usb 4-1: config 0 descriptor?? [ 231.759816][ T27] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 231.957452][ T4300] usb 4-1: Failed to submit usb control message: -71 [ 231.957679][ T27] usb 4-1: USB disconnect, device number 12 [ 231.969723][ T4300] usb 4-1: unable to send the bmi data to the device: -71 [ 232.034433][ T4300] usb 4-1: unable to get target info from device [ 232.054690][ T4300] usb 4-1: could not get target info (-71) [ 232.081730][ T4300] usb 4-1: could not probe fw (-71) [ 232.512303][ T8882] trusted_key: encrypted_key: insufficient parameters specified [ 232.613726][ T8884] device batadv1 entered promiscuous mode [ 232.666926][ T8887] loop3: detected capacity change from 0 to 512 [ 232.713922][ T8891] loop2: detected capacity change from 0 to 256 [ 232.771290][ T8887] EXT4-fs (loop3): 1 truncate cleaned up [ 232.777009][ T8887] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 232.799395][ T8891] FAT-fs (loop2): Directory bread(block 64) failed [ 232.840472][ T8891] FAT-fs (loop2): Directory bread(block 65) failed [ 232.847236][ T8891] FAT-fs (loop2): Directory bread(block 66) failed [ 232.862611][ T8891] FAT-fs (loop2): Directory bread(block 67) failed [ 232.874032][ T8891] FAT-fs (loop2): Directory bread(block 68) failed [ 232.884068][ T8891] FAT-fs (loop2): Directory bread(block 69) failed [ 232.922360][ T8891] FAT-fs (loop2): Directory bread(block 70) failed [ 232.948916][ T8891] FAT-fs (loop2): Directory bread(block 71) failed [ 232.952642][ T8900] loop4: detected capacity change from 0 to 128 [ 232.963199][ T8899] VFS: could not find a valid V7 on nullb0. [ 232.983221][ T8900] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 233.002616][ T8891] FAT-fs (loop2): Directory bread(block 72) failed [ 233.009222][ T8891] FAT-fs (loop2): Directory bread(block 73) failed [ 233.040947][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 233.102411][ T8900] ================================================================== [ 233.110540][ T8900] BUG: KASAN: use-after-free in sysv_new_block+0x788/0x960 [ 233.117793][ T8900] Read of size 4 at addr ffff88804d8460c8 by task syz.4.1920/8900 [ 233.125721][ T8900] [ 233.128086][ T8900] CPU: 1 PID: 8900 Comm: syz.4.1920 Not tainted 6.1.131-syzkaller #0 [ 233.136202][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.146314][ T8900] Call Trace: [ 233.149623][ T8900] [ 233.152664][ T8900] dump_stack_lvl+0x1e3/0x2cb [ 233.157386][ T8900] ? nf_tcp_handle_invalid+0x647/0x647 [ 233.162873][ T8900] ? panic+0x764/0x764 [ 233.166972][ T8900] ? _printk+0xd1/0x111 [ 233.171166][ T8900] ? __virt_addr_valid+0x17f/0x530 [ 233.176482][ T8900] ? __virt_addr_valid+0x17f/0x530 [ 233.181628][ T8900] print_report+0x15f/0x4f0 [ 233.186186][ T8900] ? __virt_addr_valid+0x17f/0x530 [ 233.191595][ T8900] ? __virt_addr_valid+0x17f/0x530 [ 233.196740][ T8900] ? __virt_addr_valid+0x45b/0x530 [ 233.201961][ T8900] ? __phys_addr+0xb6/0x170 [ 233.206478][ T8900] ? sysv_new_block+0x788/0x960 [ 233.211559][ T8900] kasan_report+0x136/0x160 [ 233.216267][ T8900] ? sysv_new_block+0x788/0x960 [ 233.221141][ T8900] sysv_new_block+0x788/0x960 [ 233.225843][ T8900] get_block+0x2e7/0x1790 [ 233.230202][ T8900] ? create_page_buffers+0x1d2/0x4b0 [ 233.235739][ T8900] ? __rwlock_init+0x140/0x140 [ 233.240618][ T8900] ? sysv_truncate+0x1050/0x1050 [ 233.245589][ T8900] ? attach_page_private+0x110/0x300 [ 233.251085][ T8900] ? create_page_buffers+0x24e/0x4b0 [ 233.256403][ T8900] __block_write_begin_int+0x544/0x1a30 [ 233.261988][ T8900] ? xas_load+0x11a/0x140 [ 233.266380][ T8900] ? sysv_truncate+0x1050/0x1050 [ 233.271432][ T8900] ? page_zero_new_buffers+0x650/0x650 [ 233.276950][ T8900] ? PageHeadHuge+0x8e/0x1c0 [ 233.281582][ T8900] ? __block_write_begin+0x61/0x150 [ 233.286817][ T8900] ? sysv_prepare_chunk+0x12/0x30 [ 233.291916][ T8900] sysv_make_empty+0x88/0x370 [ 233.296620][ T8900] ? inc_nlink+0x4a/0x130 [ 233.300970][ T8900] sysv_mkdir+0x7b/0x120 [ 233.305315][ T8900] vfs_mkdir+0x3b6/0x590 [ 233.309598][ T8900] do_mkdirat+0x225/0x360 [ 233.313946][ T8900] ? vfs_mkdir+0x590/0x590 [ 233.318377][ T8900] ? getname_flags+0x1f9/0x4f0 [ 233.323163][ T8900] __x64_sys_mkdirat+0x85/0x90 [ 233.327939][ T8900] do_syscall_64+0x3b/0xb0 [ 233.332453][ T8900] ? clear_bhb_loop+0x45/0xa0 [ 233.337148][ T8900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.343070][ T8900] RIP: 0033:0x7ff40f78b9d7 [ 233.347505][ T8900] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.367316][ T8900] RSP: 002b:00007ff410679e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 233.375767][ T8900] RAX: ffffffffffffffda RBX: 00007ff410679ef0 RCX: 00007ff40f78b9d7 [ 233.383756][ T8900] RDX: 00000000000001ff RSI: 0000400000000080 RDI: 00000000ffffff9c [ 233.391917][ T8900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.399905][ T8900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000400000000080 [ 233.407889][ T8900] R13: 00007ff410679eb0 R14: 0000000000000000 R15: 0000000000000000 [ 233.415875][ T8900] [ 233.418896][ T8900] [ 233.421216][ T8900] The buggy address belongs to the physical page: [ 233.427638][ T8900] page:ffffea0001361180 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x4d846 [ 233.437828][ T8900] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 233.444958][ T8900] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 233.453805][ T8900] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 233.462391][ T8900] page dumped because: kasan: bad access detected [ 233.468808][ T8900] page_owner tracks the page as freed [ 233.474169][ T8900] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 8569, tgid 8568 (syz.2.1771), ts 223158044065, free_ts 225632662606 [ 233.491970][ T8900] post_alloc_hook+0x18d/0x1b0 [ 233.496742][ T8900] get_page_from_freelist+0x3731/0x38d0 [ 233.502311][ T8900] __alloc_pages+0x28d/0x770 [ 233.506906][ T8900] __folio_alloc+0xf/0x30 [ 233.511236][ T8900] vma_alloc_folio+0x486/0x990 [ 233.516004][ T8900] shmem_alloc_and_acct_folio+0x5a8/0xd50 [ 233.521737][ T8900] shmem_get_folio_gfp+0x13f0/0x3470 [ 233.527047][ T8900] shmem_write_begin+0x16e/0x4e0 [ 233.532161][ T8900] generic_perform_write+0x2fc/0x5e0 [ 233.537726][ T8900] __generic_file_write_iter+0x176/0x400 [ 233.543462][ T8900] generic_file_write_iter+0xab/0x310 [ 233.549019][ T8900] vfs_write+0x857/0xbc0 [ 233.553554][ T8900] ksys_write+0x19c/0x2c0 [ 233.558093][ T8900] do_syscall_64+0x3b/0xb0 [ 233.562521][ T8900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.568535][ T8900] page last free stack trace: [ 233.573379][ T8900] free_unref_page_prepare+0x12a6/0x15b0 [ 233.579043][ T8900] free_unref_page_list+0x663/0x900 [ 233.584352][ T8900] release_pages+0x24c4/0x27a0 [ 233.589267][ T8900] __pagevec_release+0x80/0xf0 [ 233.594136][ T8900] shmem_undo_range+0x865/0x2390 [ 233.599182][ T8900] shmem_evict_inode+0x265/0xa60 [ 233.604125][ T8900] evict+0x529/0x930 [ 233.608022][ T8900] __dentry_kill+0x436/0x650 [ 233.612639][ T8900] dentry_kill+0xbb/0x290 [ 233.616985][ T8900] dput+0xfb/0x1d0 [ 233.620821][ T8900] __fput+0x62e/0x8d0 [ 233.624851][ T8900] task_work_run+0x246/0x300 [ 233.629474][ T8900] exit_to_user_mode_loop+0xde/0x100 [ 233.634815][ T8900] exit_to_user_mode_prepare+0xb1/0x140 [ 233.640502][ T8900] syscall_exit_to_user_mode+0x60/0x270 [ 233.646335][ T8900] do_syscall_64+0x47/0xb0 [ 233.650756][ T8900] [ 233.653075][ T8900] Memory state around the buggy address: [ 233.658701][ T8900] ffff88804d845f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 233.666860][ T8900] ffff88804d846000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 233.674921][ T8900] >ffff88804d846080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 233.683044][ T8900] ^ [ 233.689451][ T8900] ffff88804d846100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 233.697532][ T8900] ffff88804d846180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 233.705595][ T8900] ================================================================== [ 233.713739][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.826403][ T8900] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 233.833923][ T8900] CPU: 0 PID: 8900 Comm: syz.4.1920 Not tainted 6.1.131-syzkaller #0 [ 233.842024][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.852115][ T8900] Call Trace: [ 233.855432][ T8900] [ 233.858388][ T8900] dump_stack_lvl+0x1e3/0x2cb [ 233.863302][ T8900] ? nf_tcp_handle_invalid+0x647/0x647 [ 233.869007][ T8900] ? panic+0x764/0x764 [ 233.873119][ T8900] ? preempt_schedule_common+0xa6/0xd0 [ 233.878628][ T8900] ? vscnprintf+0x59/0x80 [ 233.883176][ T8900] panic+0x318/0x764 [ 233.887553][ T8900] ? check_panic_on_warn+0x1d/0xa0 [ 233.892710][ T8900] ? memcpy_page_flushcache+0xfc/0xfc [ 233.898130][ T8900] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 233.904167][ T8900] ? _raw_spin_unlock+0x40/0x40 [ 233.909262][ T8900] ? print_report+0x4a3/0x4f0 [ 233.914017][ T8900] check_panic_on_warn+0x7e/0xa0 [ 233.919092][ T8900] ? sysv_new_block+0x788/0x960 [ 233.924105][ T8900] end_report+0x66/0x110 [ 233.928577][ T8900] kasan_report+0x143/0x160 [ 233.933211][ T8900] ? sysv_new_block+0x788/0x960 [ 233.938115][ T8900] sysv_new_block+0x788/0x960 [ 233.942843][ T8900] get_block+0x2e7/0x1790 [ 233.947318][ T8900] ? create_page_buffers+0x1d2/0x4b0 [ 233.952640][ T8900] ? __rwlock_init+0x140/0x140 [ 233.957441][ T8900] ? sysv_truncate+0x1050/0x1050 [ 233.962431][ T8900] ? attach_page_private+0x110/0x300 [ 233.967783][ T8900] ? create_page_buffers+0x24e/0x4b0 [ 233.973120][ T8900] __block_write_begin_int+0x544/0x1a30 [ 233.978729][ T8900] ? xas_load+0x11a/0x140 [ 233.983133][ T8900] ? sysv_truncate+0x1050/0x1050 [ 233.988207][ T8900] ? page_zero_new_buffers+0x650/0x650 [ 233.993720][ T8900] ? PageHeadHuge+0x8e/0x1c0 [ 233.998387][ T8900] ? __block_write_begin+0x61/0x150 [ 234.003627][ T8900] ? sysv_prepare_chunk+0x12/0x30 [ 234.009075][ T8900] sysv_make_empty+0x88/0x370 [ 234.014079][ T8900] ? inc_nlink+0x4a/0x130 [ 234.018474][ T8900] sysv_mkdir+0x7b/0x120 [ 234.023138][ T8900] vfs_mkdir+0x3b6/0x590 [ 234.027437][ T8900] do_mkdirat+0x225/0x360 [ 234.031816][ T8900] ? vfs_mkdir+0x590/0x590 [ 234.036450][ T8900] ? getname_flags+0x1f9/0x4f0 [ 234.041685][ T8900] __x64_sys_mkdirat+0x85/0x90 [ 234.046523][ T8900] do_syscall_64+0x3b/0xb0 [ 234.051347][ T8900] ? clear_bhb_loop+0x45/0xa0 [ 234.056093][ T8900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.062182][ T8900] RIP: 0033:0x7ff40f78b9d7 [ 234.066701][ T8900] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.087505][ T8900] RSP: 002b:00007ff410679e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 234.096027][ T8900] RAX: ffffffffffffffda RBX: 00007ff410679ef0 RCX: 00007ff40f78b9d7 [ 234.104576][ T8900] RDX: 00000000000001ff RSI: 0000400000000080 RDI: 00000000ffffff9c [ 234.112843][ T8900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 234.121094][ T8900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000400000000080 [ 234.129164][ T8900] R13: 00007ff410679eb0 R14: 0000000000000000 R15: 0000000000000000 [ 234.137838][ T8900] [ 234.141350][ T8900] Kernel Offset: disabled [ 234.145792][ T8900] Rebooting in 86400 seconds..