last executing test programs: 3.224923896s ago: executing program 3 (id=2813): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x800000000d, &(0x7f00001c9fff)=' ', 0x1) 2.994396188s ago: executing program 3 (id=2816): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newnexthop={0x24, 0x68, 0x121, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) 2.912640029s ago: executing program 1 (id=2817): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f00000002c0)=""/4118, 0x1016, 0xe) 2.750151821s ago: executing program 3 (id=2819): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x2, 0xff, 0x0, 0xc8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) 2.520457823s ago: executing program 3 (id=2822): r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001e00), 0x2002, 0x0) read$hiddev(r0, &(0x7f0000003340)=""/242, 0xf2) 2.210829446s ago: executing program 3 (id=2824): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)={[{@allow_utime={'allow_utime', 0x3d, 0xd85}}, {@sys_tz}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@namecase}, {@keep_last_dots}, {@gid}, {@errors_remount}, {@errors_continue}, {@keep_last_dots}]}, 0x1, 0x152f, &(0x7f00000037c0)="$eJzs3AucTVX7OPDnWWvtMSSdJrkMa61nc5LLIklySZJLkiRJkltC0iSvJCSG3JKGJCSXIbkMIblMTBr3+/2SkCRNkoTklqz/Z8r81Vvv/33f39svv/9vnu/nsz+znrP2s/ba85yzz977nJlvug6r1aR29UZEBP8R/OVHIgDEAsAgALgGAAIAKB9XPi6zP6fExP9sI+zP9VDKlZ4Bu5K4/tkb1z974/pnb1z/7I3rn71x/bM3rn/2xvVnLDvbMqPgtbxk34Xv/2dn/P7/v0hG6XFfrCt9fTeAmH81hev//z/8D3K5/v9rBf/KSlz/7I3rn13FXukJsP8B+PWfHeT4hz1c/+yN689Ydvbre8GxcOXvR//VC0Sy92cgV/r5xxhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsezjrL1MAkNW+0vNijDHGGGOMMcbYn8fnuNIzYIwxxhhjjDHG2H8/BAESFAQQAzkgFnJCLhAAMVn910IcXAd54XrIB/mhABSEeCgEhUGDAQsEIRSBohCFG6AY3AjFoQSUhFLgoDSUgZugLNwM5eAWKA+3QgW4DSpCJagMVeB2qAp3QDW4E6rDXVADakItqA13Qx24B+rCvVAP7oP6cD80gAegITwIjeAhaAwPQxN4BJrCo9AMmkMLaAmt/kv5L0BPeBF6QW9IhD7QF16CftAfBsBAGAQvw2B4BYbAq5AEQ2EYvAbD4XUYAW/ASBgFo+FNGANvwVgYB+NhAiTDRJgEb8NkeAemwFSYBtMhBWbATHgXZsFsmAPvwVx4H+bBfFgACyEVPoBFsBjS4ENYAh9BOiyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBR/DbvgE9sBe2Aefwn747N/MP/N3+d0QEFCgQIUKYzAGYzEWc2EuzI25MQ/mwQhGMA7jMC/mxXyYDwtgAYzHeCyMhdGgQULCIlgEoxjFYlgMi2NxLIkl0aHDMlgGy+LNWA7LYXksjxWwAlbESlgJq2AVrIpVsRpWw+pYHWtgDayFtfBuvBv7YF2si/WwHtbH+lm3p7ARNsLG2BibYBNsik2xGTbDFtgCW2ErbI2tsQ22wXbYDttje+yAHTABE7AjdsRO2Ak7Y2fsgl2wK3bFbtgdu2e8kAPwRXwRe2MN0Qf7Yl/sh0k5BuBAHIgv42B8BV/BVzEJh+IwfA1fw9dxBJ7GkTgKR+NorCrewrE4DklMwGRMxkk4CSfjZJyCU3EqTscUnIEzcSbOwtk4G9/Dufg+vo/zcT4uxFRMxUW4GNMwDZfgGUzHpbgMl+MKXIkrcDWuwdW4DtfjOtyIG3EzbsatuBW343bciTvxY1QA+Anuxb2YhPtxPx7AA3gQD+IhPIQZmIGH8TAewSN4FI/iMTyGx/EEnsQTeApP4Wk8g2fxLJ7H83gBn4v/qvHHJdYmgcikhBIxIkbEiliRS+QSuUVukUfkEREREXEiTuQVeUU+kU8UEAVEvIgXhUVhYYQRJMLMI4WIiqgoJoqJ4qK4KClKCiecKCPKiLKirCgnyony4lZRQdwmKopKoq2rIqqIqqKdqybuFNVFdVFD1BS1RG1RW9QRdURdUVfUE/VEfVFfNBAPiIaiDw7Ah0RmZZqIodhUDMNmormQl45QrcUIbCPainbiCTEKR2IH0doliKdFRzEWO4m/iXH4rOgiJmBX8bzoJrqLHuIF0VO0cb1EbzEF+4i+Yjr2E/3FADFQzMKa4j2cm7OWeFUkiaFimHhNLMTXxQjxhhgpRonR4k0xRrwlxopxYryYIJLFRDFJvC0mi3fEFDFVTBPTRYqYIWaKd8UsMVvMEe+JueJ9MU/MFwvEQpEqPhCLxGKRJj4US8RHIl0sFcvEcrFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHaxQ+wUu8THYrf4ROwRe8U+8anYLz4TB8Tn4qD4QhwSX4oM8ZU4LL4WR8Q34qj4VhwT34nj4oQ4Kb4Xp8QP4rQ4I86Kc+K8+FFcED+Ji8ILkCiFlFLJQMbIHDJW5pS55FUytwyyjv8yTl4n88rrZT6ZXxaQBWW8LCQLSy2NtJJkKIvIojIqb5DF5I2yuCwhS8pS0snSsoy8SZaVN8ty8hZZXt4qK8jbZEVZSVaWVeTtsqq8Q0Lkl23UkDVlLVlb3i0T4R5ZV94r68n7ZH15v2wgH5AN5YOykXxINpYPyybyEdlUPiqbyeayhWwpW8nHZGv5uGwj28p28gnZXj4pO8inZIJ8WnaU/tJT5FnZRT4nu8rnZTfZXfaQP8mL0stesreEPiD7ypdkP9lfDpAD5SD5shwsX5FD5KsySQ6Vw+Rrcrh8XY6Qb8iRcpQcLd+UY+RbcqwcJ8fLCTJZTpST5NtysnxHTpFT5TQ5XabIGXLApZHmSPlP89/+g/whP299s9wit8ptcrvcIXfKXfJjuVvulnvkHrlP7pP75X55QB6QB+VBeUgekhkyQx6Wh+UReUQelUflMXlMHpcn5Dn5vTwlf5Cn5Rl5Rp6T5+V5eeHS7wAUKqGkUipQMSqHilU5VS51lcqtrlZ51DUqoq5Vceo6lVddr/Kp/KqAKqjiVSFVWGlllFWkQlVEFVVRdQNeesKokqqUcqq0KqNu+nfyVTF1oyquSvwmP2t+if9gfq1UK9VatVZtVBvVTrVT7VV71UF1UAkqQXVUHVUn1Ul1Vp1VF9VFdVVdVTfVTfVQPVRP1VP1Ur1UokpUfdVLqp/qrwaogWqQellk7sMQNUQlqSQ1TA1Tw9VwNUKNUCPVSDVajVZj1Bg1Vo1V49V4layS1SQ1SU1Wk9UUNUVNU9NUikpRM9VMNUvNUnPUHDVXzVXz1Dy1QC1QqSpVLVKLVJpKU0vUEpWulqqlarlarlaqlWq1Wq3WqrVqvVqvNqqNKl1tUVvUNrVN7VA71C61S+1Wu9UetUftU/vUfrVfHVAH1EF1UB1Sh1SGylCH1WF1RB1RR9VRdUwdU8fVcXVSnVSn1Cl1Wp1WZ9VZdV6dVxfUBXVRXcw87QtEIAIVqCAmiAlig9ggV5AryB3kDvIEeYJIEAnigrggb3B9kC/IHxQICgbxQaGgcKADE9hAXCp6NLghKBbcGBQPSgQlg1KBC0oHZYKbgrLBzUG54JagfHBrUCG4LagYVAoqB1WC24OqwR1BteDOoHpwV1AjqBnUCmoHdwd1gnuCusG9Qb3gvqB+cH/QIHggaBg8GDQKHgoaBw8HTYJHgqbBo0GzoHnQImgZtPpTx/f+dP7HXS/dWyfqPrqvfkn30/31AD1QD9Iv68H6FT1Ev6qT9FA9TL+mh+vX9Qj9hh6pR+nR+k09Rr+lx+pxeryeoJP1RD1Jv60n63f0FD1VT9PTdYqeoWfqd/UsPVvP0e/pufp9PU/P1wv0Qp2qP9CL9GKdpj/US/RHOl0v1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/Uu/THerf+RO/Re/U+/anerz/TB/Tn+qD+Qh/SX+oM/ZU+rL/WR/Q3+qj+Vh/T3+nj+oQ+qb/Xp/QP+rQ+o8/qc/q8/lFf0D/pi9pnntxnvr0bZZSJMTEm1sSaXCaXyW1ymzwmj4mYiIkzcSavyWvymXymgClg4k28KWwKm0xkyBQxRUzURE0xU8wUN8VNSVPSOONMGVPGlDVlTTlTzpQ35U0FU8FUNBVNZVPZ3G5uN3eYO8yd5k5zl7nL1DQ1TW1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDPNTAvTwrQyrUxr09q0MW1MO9POtDftTQfTwSSYBNPRdDSdTCfT2XQ2XUwX09V0Nd1MN9PD9DA9TU/Ty/QyiSbR9DV9TT/TzwwwA8wgM8gMNoPNEDPEJJkkM8wMM8PNcDPCjDAjzSgzOvNE1bxlxppxZryZYJJNsplkJpnJZrKZYqaYaWaaSTEpZqaZaWaZWWaOmWPmmrlmnplnFpgFJtWkmkVmkUkzaWaJWWLSTbpZZpaZFWaFWWVWmTVmjVln1pkNsMFsMpvMFrPFbDPbzA6zw+wyu8xus9vsMXvMPrPP7Df7zQFzwBw0B80hc8hkmAxz2Bw2R8wRc9QcNcfMMXPcHDcnzUlzypwyp81pc9acNedN/kvvl97E2pw2l73K5rZX2zz2Gvv3cQFb0MbbQraw1Tafzf+b2Fhri9sStqQtZZ0tbcvYm34XV7SVbGVbxd5uq9o7bLXfxXXsPbauvdfWs/fZ2vbu38T17f22gX3ENkQEsM1tY9vSNrGP2Kb2UdvMNrctbEvb3j5pO9inbIJ92na0z/wuXmQX2zV2rV1n19s9dq89a8/ZI/Ybe97+aHvZ3naQfdkOtq/YIfZVm2SH/i4ebd+0Y+xbdqwdZ8fbCb+Lp9npNsXOsDPtu3aWnf27ONV+YOfaNDvPzrcL7MKf48w5pdkP7RL7kU23ASyzy+0Ku9Kusqv/71yX2412k91sd9tP7Da73e6wO+2urBNhu9fus5/a/fYze9h+bQ/aL+whe9Rm2K9+jjP376j91h6z39nj9oQ9ab+3p+wPKis7c9+/tz/Zi9ZbICQgSYoCiqEcFEs5KRddRbnpaspD11CErqU4uo7y0vWUj/JTASpI8VSICpMmQ5aIQipCRSlKN1DW9EpSKXJUmsrQTVSWbqZydAuVp1upAt1GFakSVaYqdDtVpTuoGt1J1ekuqkE1qRbVprupDt1Ddeleqkf3UX26nxrQA9SQHqRG9BA1poepCT1CTelRakbNqQW1pFb0GLWmx6kNtaV29AS1pyepAz1FCfQ0daRnqBP9jTrTs9SFnqOu9Dx1o+7Ug16gnvQi9aLelEh9qC+9RP2oPw2ggTSIXqbB9AoNoVcpiYbSMHqNhtPrNILeoJE0ikbTmzSG3qKxNI7G0wRKpok0id6myfQOTaGpNI2mUwrNoJn0Ls2i2TSH3qO59D7No/m0gBZSKn1Ai2gxpdGHtIQ+onRaSstoOa2glbSKVtMaWkvraD1toI20iTbTFtpK22g77aCdtIs+pt30Ce2hvbSPPqX99BkdoM/pIH1Bh+hLyqCv6DB9TUfoGzpK3/re9B0dpxN0kr6nU/QDnaYzdJbO0Xn6kS7QT3SRPEGIoQhlqMIgjAlzhLFhzjBXeFWYO7w6zBNeE0bCa8O48Lowb3h9mC/MHxYIC4bxYaGwcKhDE9qQwjAsEhYNo+ENYbHwxrB4WCIsGZYKXVg6LBPeFJYNbw7LhbeE5cNbwwrhbWHFsFL4yH1VwtvDquEdYbXwzrB6eFdYI6wZ1gprh3eHdcJ7wrrhvWG98L6wXHh/2CB8IGwYPhg2Ch8KG4cPh03CR8Km4aNhs7B52CJsGbYKHwtbh4+HbcK2YbvwqrB9+GTYIXwqTAifDjuGz/zcf//irP4nftefGPYJ+4YvhS+F3t8rF0QXRlOjH0QXRRdH06IfRpdEP4qmR5dGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0U3R72vnQMcOuGkUy5wMS6Hi3U5XS53lcvtrnZ53DUu4q51ce46l9dd7/K5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd4Mr5m50xV0JV9KVcs6VdmVcS9fKtXKt3eOujWvr2rkn3BPuSfeke8o95Z52Hd0zrpP7m+vsnnVd3HPuOfe86+a6ux7uBdfTTczzy2sy0fV1fV0/188NcAPcIDfIDXaD3RA3xCW5JDfMDXPD3XA3wo1wI91IN9qNdmPcGDfWjXXj3XiX7JLdJDfJTXaT3RQ3xU1z01yKS3Ez3Uw3y81yVWf/spV5bp5b4Ba4VJfqFrnMc8Y0t8Qtceku3S1zy9wKt8KtcqvcGrfGrXPr3Aa3wW1ym9wWt8Vtc9vcDrfD7XK73G632+3x1/wyqNvvDrgD7qA76A65L12G+8oddl+7I+4bd9R9646579xxd8KddN+7U+4Hd9qdcWfdOXfe/eguuJ/cReddcmRiZFLk7cjkyDuRKZGpkWmR6ZGUyIzIzMi7kVmR2ZE5kfcicyPvR+ZF5kcWRBZGUiMfRBZFFkfSIh9GlkQ+iqRHlkaWRZZHVkRWRrwvtC30RXxRH/U3+GL+Rl/cl/AlfSnvfGlfxt/ky/qbfTl/iy/vb/UV/G2+oq/kK/tHfTPf3LfwLX0r/5hv7R/3bXxb384/4dv7J30H/5RP8E/7jv4Z38n/zXf2z/ou/jnf1T/vu/nuvod/wff0L/pevrdP9H18X/+S7+f7+wF+oB/kX/aD/St+iH/VJ/mhfph/zQ/3r/sR/g0/0o/yo2Pe9GOyLpFhgk/2E/0k/7af7N/xU/xUP81P9yl+hp/p3/Wz/Gw/x7/n5/r3/Tw/3y/wC32q/8Av8ot9mv/QL/Ef+XS/NOumsV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mt/sdfqff5T/2u/0nfo/f6/f5T/1+/5k/4D/3B/0X/pD/0mf4r/xh/7U/4r/xR/23/pj/zh/3J/xJ/70/5X/wp/0Zf9af8+f9j/6C/8lf5L9ZY4wxxhj7l0y83BS/7fnldn6fP8gRv1q5LwBcvb1gxq/7M88oN+T7pd1fxLePAMDTvbs+lLXUqJGYmHhp3XQJQdH5AFmfBGX6+asHl+Kl0A6ehARoC2X/cP79Rffz9E/Gj94KkOtXObFwOb48/ucAmPgH4z/2xOhFFcKzcf+P8ecDFC96OScnXI6XQruf76+0hXL/YP75W/+T+ef8Ihmgza9ycsPl+PL8y8Dj8Awk/GZNxhhjjDHGGGPsF/1F5c5Z159Z3/j8o+vzeHU5Jwdcjv/Z9TljjDHGGGOMMcauvGe793jqsYSEtp3//Ua1/1LWv9xoCv9dI3PjDxveA2Q9ogDgPxwQILMh/8q92PqXbCvp0kvn77tWnPMB/M8o5Z/RuMIHJsYYY4wxxtif7vJJ/28fV1dqQowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWDb0V/w7sSu9j4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtiV9n8CAAD//7wUAB0=") mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 2.088784828s ago: executing program 1 (id=2826): r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000001540), 0x1, 0x0) write$damon_monitor_on(r0, &(0x7f0000001580), 0x3) 2.003831479s ago: executing program 4 (id=2827): r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x3f5}, [], {0x14, 0x3ed}}, 0x28}}, 0x4010) 1.87783955s ago: executing program 1 (id=2829): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/14, 0xe}], 0x1) 1.760883611s ago: executing program 4 (id=2831): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@utf8no}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@utf8}, {@fat=@dos1xfloppy}, {@shortname_lower}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_winnt}]}, 0x2, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.729770212s ago: executing program 3 (id=2832): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff000040000000000000000100008406"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa000905"], 0x0) 1.637146922s ago: executing program 1 (id=2833): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xffffffb5, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e000504000000000000000004"], 0x114}], 0x1}, 0x10) 1.541967113s ago: executing program 0 (id=2835): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x25, 0x0, &(0x7f0000000140)) 1.352959905s ago: executing program 1 (id=2836): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0x1, 0x6216, &(0x7f000000cb40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) 1.352633695s ago: executing program 4 (id=2837): syz_mount_image$affs(&(0x7f0000009e00), &(0x7f0000000080)='./file0\x00', 0x14000, &(0x7f00000000c0)={[{@bs={'bs', 0x3d, 0x400}}, {@root={'root', 0x3d, 0xa7}}, {@mode={'mode', 0x3d, 0x1}}, {@mufs}, {@protect}, {@mufs}, {@setuid}, {@bs={'bs', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x40006}}, {@root={'root', 0x3d, 0xfffffffffffffff9}}, {@protect}, {@notruncate}, {@mode={'mode', 0x3d, 0xb}}, {@notruncate}]}, 0x4, 0x9ddb, &(0x7f0000013c80)="$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") syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000ac0)='./file0\x00', 0x2004008, &(0x7f00000000c0)=ANY=[], 0xfe, 0x4fb, &(0x7f0000000b00)="$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") 1.314546926s ago: executing program 0 (id=2839): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1080a, &(0x7f0000000400)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES64, @ANYRES64, @ANYBLOB="d99417de7cd761c0fb45dbf9ee0a1110fc", @ANYRES16=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES8=0x0], 0x21, 0x14fd, &(0x7f0000000980)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) 1.177327658s ago: executing program 2 (id=2840): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0) 957.07708ms ago: executing program 2 (id=2841): r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) 921.95528ms ago: executing program 4 (id=2842): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x2, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x2e) 825.195031ms ago: executing program 0 (id=2843): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x80000001, 0x4) 748.828712ms ago: executing program 2 (id=2844): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0xc4a, 0x9, 0x88a8}}]}]}]}]}, 0x68}}, 0x0) 726.296672ms ago: executing program 4 (id=2845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 534.532944ms ago: executing program 2 (id=2846): setresgid(0xee00, 0xee01, 0x0) setresgid(0x0, 0x0, 0xee01) 480.225325ms ago: executing program 0 (id=2847): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 'macvtap0\x00'}) 417.096455ms ago: executing program 4 (id=2848): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 294.861897ms ago: executing program 0 (id=2849): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="240000001a005f0400f9f4070009040180202000000000000000000004001e0000000000", 0x24) 281.890067ms ago: executing program 2 (id=2850): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000200000009d14400008"], 0x34, 0x0) 102.229859ms ago: executing program 1 (id=2851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) 102.102659ms ago: executing program 2 (id=2852): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffdf0000000000000000850000003600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 0s ago: executing program 0 (id=2853): io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): noring removed mblk_io_submit option [ 179.572327][ T7512] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 179.586815][ T7489] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 179.632673][ T7512] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 179.659887][ T7512] System zones: 1-12 [ 179.672645][ T7512] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.1445: corrupted in-inode xattr [ 179.682318][ T7489] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 179.696305][ T7512] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1445: couldn't read orphan inode 15 (err -117) [ 179.724951][ T7512] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 179.737341][ T4328] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 179.746383][ T4328] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 179.800370][ T4328] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 53ms [ 179.840587][ T4328] gfs2: fsid=syz:syz.0: jid=0: Done [ 179.847483][ T7489] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 179.989656][ T7523] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 179.997779][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 180.286481][ T7489] gfs2: fsid=syz:syz.0: found 1 quota changes [ 180.427736][ T7489] gfs2: fsid=syz:syz.0: gfs2_check_dirent: name length is greater than space in dirent (first in block) [ 180.449425][ T7536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1455'. [ 180.493687][ T7489] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 180.493687][ T7489] inode = 12 2341 [ 180.493687][ T7489] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 180.596054][ T7489] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 180.635193][ T7541] loop3: detected capacity change from 0 to 64 [ 180.645189][ T7489] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:7489 [syz.1.1432] __gfs2_lookup+0x8c/0x260 [ 180.646218][ T7543] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1458'. [ 180.664628][ T7489] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 180.664702][ T7489] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 180.720791][ T7489] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 180.765981][ T7489] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 180.784887][ T7489] gfs2: fsid=syz:syz.0: File system withdrawn [ 180.805955][ T7489] CPU: 0 PID: 7489 Comm: syz.1.1432 Not tainted 6.1.135-syzkaller #0 [ 180.814098][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.824213][ T7489] Call Trace: [ 180.827517][ T7489] [ 180.830478][ T7489] dump_stack_lvl+0x168/0x22e [ 180.835209][ T7489] ? kobject_uevent_env+0x35f/0x8a0 [ 180.840484][ T7489] ? show_regs_print_info+0x12/0x12 [ 180.845737][ T7489] ? load_image+0x3b0/0x3b0 [ 180.850284][ T7489] ? kobject_uevent_env+0x35f/0x8a0 [ 180.855541][ T7489] gfs2_withdraw+0x143f/0x1780 [ 180.860363][ T7489] ? gfs2_lm+0x220/0x220 [ 180.864641][ T7489] ? load_image+0x3b0/0x3b0 [ 180.869197][ T7489] ? gfs2_consist_inode_i+0xf1/0x110 [ 180.874532][ T7489] gfs2_dirent_scan+0x525/0x650 [ 180.879429][ T7489] ? gfs2_dirent_search+0x7e0/0x7e0 [ 180.884671][ T7489] ? gfs2_dirent_search+0x7e0/0x7e0 [ 180.889921][ T7489] gfs2_dirent_search+0x2dd/0x7e0 [ 180.894993][ T7489] ? gfs2_permission+0x3f1/0x4c0 [ 180.899970][ T7489] ? gfs2_dir_search+0x220/0x220 [ 180.904947][ T7489] ? gfs2_lookupi+0x640/0x640 [ 180.909678][ T7489] gfs2_dir_search+0x49/0x220 [ 180.914402][ T7489] gfs2_lookupi+0x45f/0x640 [ 180.918950][ T7489] ? gfs2_lookup_simple+0xf0/0xf0 [ 180.924002][ T7489] ? d_alloc_parallel+0x136f/0x1480 [ 180.929238][ T7489] ? __gfs2_lookup+0x8c/0x260 [ 180.933962][ T7489] ? d_alloc_parallel+0x2d4/0x1480 [ 180.939120][ T7489] __gfs2_lookup+0x8c/0x260 [ 180.943687][ T7489] ? lockdep_softirqs_off+0x420/0x420 [ 180.949110][ T7489] ? gfs2_atomic_open+0x210/0x210 [ 180.954212][ T7489] ? __init_waitqueue_head+0xa5/0x150 [ 180.959644][ T7489] __lookup_slow+0x27d/0x3a0 [ 180.964280][ T7489] ? lookup_one_len+0x2c0/0x2c0 [ 180.969187][ T7489] ? preempt_count_add+0x8d/0x190 [ 180.974251][ T7489] ? down_read+0x1a8/0x2d0 [ 180.978709][ T7489] lookup_slow+0x53/0x70 [ 180.982996][ T7489] walk_component+0x2be/0x3f0 [ 180.987711][ T7489] ? path_lookupat+0x15c/0x440 [ 180.992506][ T7489] path_lookupat+0x169/0x440 [ 180.997131][ T7489] filename_lookup+0x1f0/0x500 [ 181.001933][ T7489] ? hashlen_string+0x110/0x110 [ 181.006852][ T7489] ? strncpy_from_user+0x1e3/0x350 [ 181.012010][ T7489] ? getname_flags+0x206/0x500 [ 181.016816][ T7489] user_path_at_empty+0x3e/0x60 [ 181.021711][ T7489] do_sys_truncate+0xa3/0x190 [ 181.026430][ T7489] ? break_lease+0xd0/0xd0 [ 181.030892][ T7489] ? lockdep_hardirqs_on+0x94/0x140 [ 181.035823][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'. [ 181.036124][ T7489] do_syscall_64+0x4c/0xa0 [ 181.049427][ T7489] ? clear_bhb_loop+0x45/0xa0 [ 181.054146][ T7489] ? clear_bhb_loop+0x45/0xa0 [ 181.058867][ T7489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.064806][ T7489] RIP: 0033:0x7fd5ab18e969 [ 181.069274][ T7489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.089046][ T7489] RSP: 002b:00007fd5abf79038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 181.097507][ T7489] RAX: ffffffffffffffda RBX: 00007fd5ab3b5fa0 RCX: 00007fd5ab18e969 [ 181.105529][ T7489] RDX: 0000000000000000 RSI: 0000000000007fff RDI: 0000200000000040 [ 181.113544][ T7489] RBP: 00007fd5ab210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 181.121557][ T7489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.129566][ T7489] R13: 0000000000000000 R14: 00007fd5ab3b5fa0 R15: 00007ffc7502f428 [ 181.137600][ T7489] [ 181.355360][ T7557] loop4: detected capacity change from 0 to 256 [ 181.429546][ T7527] loop2: detected capacity change from 0 to 32768 [ 181.458764][ T7527] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1451 (7527) [ 181.521226][ T7527] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.546937][ T7527] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 181.566572][ T7527] BTRFS info (device loop2): turning on sync discard [ 181.573994][ T7527] BTRFS info (device loop2): using free space tree [ 181.612125][ T7564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1467'. [ 181.683163][ T7564] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1467'. [ 181.748344][ T7574] loop3: detected capacity change from 0 to 512 [ 181.756315][ T7574] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 181.814812][ T7574] EXT4-fs (loop3): 1 truncate cleaned up [ 181.826982][ T7574] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 181.854476][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'. [ 181.911413][ T7574] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.1470: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 181.963115][ T7590] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1472'. [ 181.984213][ T7527] BTRFS info (device loop2): enabling ssd optimizations [ 181.996366][ T4248] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 182.033537][ T7590] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1472'. [ 182.036832][ T93] block nbd0: Attempted send on invalid socket [ 182.049253][ T93] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.061943][ T52] block nbd0: Attempted send on invalid socket [ 182.062050][ T4248] CPU: 0 PID: 4248 Comm: syz-executor Not tainted 6.1.135-syzkaller #0 [ 182.068892][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.076361][ T4248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.090673][ T52] block nbd0: Attempted send on invalid socket [ 182.095523][ T4248] Call Trace: [ 182.095536][ T4248] [ 182.095546][ T4248] dump_stack_lvl+0x168/0x22e [ 182.095577][ T4248] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 182.095600][ T4248] ? show_regs_print_info+0x12/0x12 [ 182.095625][ T4248] ? load_image+0x3b0/0x3b0 [ 182.095651][ T4248] ? do_raw_spin_unlock+0x11d/0x230 [ 182.095684][ T4248] gfs2_assert_warn_i+0x18f/0x2c0 [ 182.095711][ T4248] gfs2_quota_cleanup+0x4b4/0x6a0 [ 182.101944][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.105169][ T4248] gfs2_put_super+0x22f/0x8c0 [ 182.111316][ T52] block nbd0: Attempted send on invalid socket [ 182.112784][ T4248] ? gfs2_evict_inode+0x1170/0x1170 [ 182.112829][ T4248] generic_shutdown_super+0x130/0x340 [ 182.118350][ T52] I/O error, dev nbd0, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.123110][ T4248] kill_block_super+0x7c/0xe0 [ 182.135857][ T52] block nbd0: Attempted send on invalid socket [ 182.137831][ T4248] deactivate_locked_super+0x93/0xf0 [ 182.137863][ T4248] cleanup_mnt+0x463/0x4f0 [ 182.143118][ T52] I/O error, dev nbd0, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.152144][ T4248] ? lockdep_hardirqs_on+0x94/0x140 [ 182.152182][ T4248] task_work_run+0x1ca/0x250 [ 182.152210][ T4248] ? task_work_cancel+0x230/0x230 [ 182.158140][ T52] block nbd0: Attempted send on invalid socket [ 182.163016][ T4248] ? exit_to_user_mode_loop+0x3b/0x110 [ 182.163058][ T4248] exit_to_user_mode_loop+0xe6/0x110 [ 182.169278][ T52] I/O error, dev nbd0, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.173608][ T4248] exit_to_user_mode_prepare+0xb1/0x140 [ 182.195858][ T7593] VFS: unable to find oldfs superblock on device nbd0 [ 182.198813][ T4248] syscall_exit_to_user_mode+0x16/0x40 [ 182.198863][ T4248] do_syscall_64+0x58/0xa0 [ 182.198889][ T4248] ? clear_bhb_loop+0x45/0xa0 [ 182.198908][ T4248] ? clear_bhb_loop+0x45/0xa0 [ 182.198926][ T4248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.292470][ T4248] RIP: 0033:0x7fd5ab18fc97 [ 182.296898][ T4248] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 182.316511][ T4248] RSP: 002b:00007ffc7502e6b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 182.324940][ T4248] RAX: 0000000000000000 RBX: 00007fd5ab21089d RCX: 00007fd5ab18fc97 [ 182.332919][ T4248] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7502e770 [ 182.340906][ T4248] RBP: 00007ffc7502e770 R08: 0000000000000000 R09: 0000000000000000 [ 182.348885][ T4248] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7502f800 [ 182.356863][ T4248] R13: 00007fd5ab21089d R14: 000000000002c163 R15: 00007ffc7502f840 [ 182.364853][ T4248] [ 182.403862][ T7574] EXT4-fs (loop3): Remounting filesystem read-only [ 182.431423][ T4262] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.444076][ T7574] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 182.508315][ T7574] EXT4-fs (loop3): Remounting filesystem read-only [ 182.551793][ T7595] trusted_key: encrypted_key: hex blob is missing [ 182.593871][ T7574] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.1470: Deleting old file: nlink 4, error=-117 [ 182.840193][ T7597] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1477'. [ 182.889997][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 182.927038][ T7601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.934891][ T7601] IPv6: NLM_F_CREATE should be set when creating new route [ 182.942246][ T7601] IPv6: NLM_F_CREATE should be set when creating new route [ 183.728003][ T7626] loop2: detected capacity change from 0 to 16 [ 183.761860][ T7626] erofs: (device loop2): mounted with root inode @ nid 36. [ 183.808473][ T7626] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 183.839969][ T7626] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 183.877669][ T4260] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 183.892020][ T7626] erofs: (device loop2): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 183.926729][ T7626] erofs: (device loop2): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 183.976664][ T7630] loop1: detected capacity change from 0 to 4096 [ 183.982413][ T7626] erofs: (device loop2): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 183.984851][ T7630] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 184.016324][ T7626] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 184.068101][ T7626] erofs: (device loop2): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 184.096796][ T7626] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 184.105809][ T7626] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 184.131705][ T7603] loop4: detected capacity change from 0 to 32768 [ 184.144572][ T7630] ntfs3: loop1: failed to convert "c46c" to iso8859-9 [ 184.172239][ T7603] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1481 (7603) [ 184.217583][ T7626] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 184.229636][ T7603] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.245882][ T7626] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 184.256190][ T7603] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 184.276382][ T7603] BTRFS info (device loop4): using free space tree [ 184.307573][ T7626] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 184.368653][ T27] audit: type=1800 audit(1745576861.231:28): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1489" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 184.643984][ T7603] BTRFS info (device loop4): enabling ssd optimizations [ 184.774767][ T7670] loop2: detected capacity change from 0 to 256 [ 184.796149][ T7663] loop3: detected capacity change from 0 to 4096 [ 184.822288][ T7670] exfat: Deprecated parameter 'namecase' [ 184.829475][ T7663] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 184.852356][ T4259] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.875348][ T7670] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 185.081094][ T7663] ntfs: volume version 3.1. [ 185.340699][ T7678] netlink: 'syz.1.1507': attribute type 11 has an invalid length. [ 185.413879][ T7678] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1507'. [ 185.687453][ T27] audit: type=1326 audit(1745576862.551:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.4.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509838e969 code=0x7ffc0000 [ 185.766659][ T27] audit: type=1326 audit(1745576862.551:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.4.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f509838e969 code=0x7ffc0000 [ 185.885773][ T27] audit: type=1326 audit(1745576862.551:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.4.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509838e969 code=0x7ffc0000 [ 185.996999][ T27] audit: type=1326 audit(1745576862.551:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.4.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509838e969 code=0x7ffc0000 [ 186.033922][ T7702] loop2: detected capacity change from 0 to 8 [ 186.063715][ T7702] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 186.135471][ T7702] process 'syz.2.1518' launched './file2' with NULL argv: empty string added [ 186.179803][ T7702] cramfs: Error -3 while decompressing! [ 186.216851][ T7702] cramfs: ffffffff96b4b568(26)->ffff88805226a000(4096) [ 186.254959][ T7702] cramfs: Error -3 while decompressing! [ 186.288700][ T7702] cramfs: ffffffff96b4b582(26)->ffff888050ff1000(4096) [ 186.300084][ T7709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1521'. [ 186.310336][ T7709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1521'. [ 186.318997][ T7702] cramfs: Error -3 while decompressing! [ 186.376683][ T7702] cramfs: ffffffff96b4b568(26)->ffff88805226a000(4096) [ 186.451317][ T7714] loop4: detected capacity change from 0 to 128 [ 186.547458][ T7714] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 186.602522][ T7714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.657136][ T7718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1525'. [ 186.728642][ T7722] loop2: detected capacity change from 0 to 2048 [ 186.795269][ T7722] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.337347][ T7737] loop4: detected capacity change from 0 to 4096 [ 187.365459][ T7737] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 187.428771][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1540'. [ 187.470505][ T7737] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 187.502386][ T7748] netlink: 'syz.2.1540': attribute type 2 has an invalid length. [ 187.556704][ T7748] netlink: 'syz.2.1540': attribute type 1 has an invalid length. [ 187.590530][ T7748] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1540'. [ 188.068907][ T7768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.076256][ T7768] IPv6: NLM_F_CREATE should be set when creating new route [ 188.083567][ T7768] IPv6: NLM_F_CREATE should be set when creating new route [ 188.789823][ T7794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1561'. [ 188.816687][ T7794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1561'. [ 188.911844][ T7764] loop1: detected capacity change from 0 to 32768 [ 188.919587][ T27] audit: type=1326 audit(1745576865.781:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509838e969 code=0x7ffc0000 [ 188.956486][ T7792] loop0: detected capacity change from 0 to 4096 [ 188.996714][ T27] audit: type=1326 audit(1745576865.781:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509838e969 code=0x7ffc0000 [ 189.043131][ T7792] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 189.102031][ T27] audit: type=1326 audit(1745576865.801:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f509838e969 code=0x7ffc0000 [ 189.117754][ T7764] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 189.147988][ T7796] loop3: detected capacity change from 0 to 8192 [ 189.167782][ T27] audit: type=1326 audit(1745576865.811:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.4.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509838e969 code=0x7ffc0000 [ 189.197967][ T7792] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.1563: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 189.235480][ T7796] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 189.286536][ T7764] OCFS2: ERROR (device loop1): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 189.286943][ T7796] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 189.323849][ T7764] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 189.327127][ T7792] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.1563: directory missing '..' [ 189.335548][ T7764] OCFS2: File system is now read-only. [ 189.371838][ T7764] (syz.1.1548,7764,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 189.376784][ T7796] REISERFS (device loop3): using ordered data mode [ 189.393424][ T7764] (syz.1.1548,7764,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 189.395206][ T7796] reiserfs: using flush barriers [ 189.410357][ T7764] (syz.1.1548,7764,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 189.429326][ T7796] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 189.445298][ T7764] (syz.1.1548,7764,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 189.466804][ T7764] (syz.1.1548,7764,0):ocfs2_read_virt_blocks:981 ERROR: status = -30 [ 189.480654][ T7764] (syz.1.1548,7764,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 189.489677][ T7796] REISERFS (device loop3): checking transaction log (loop3) [ 189.503307][ T7764] (syz.1.1548,7764,0):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 189.513416][ T7796] REISERFS (device loop3): Using r5 hash to sort names [ 189.523100][ T7764] (syz.1.1548,7764,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 189.576859][ T7764] (syz.1.1548,7764,0):ocfs2_mknod:298 ERROR: status = -5 [ 189.596200][ T7764] (syz.1.1548,7764,0):ocfs2_mknod:502 ERROR: status = -5 [ 189.614488][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 189.622341][ T7764] (syz.1.1548,7764,0):ocfs2_create:676 ERROR: status = -5 [ 189.685312][ T7796] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "01777777777777777777777<LqQ·χ [ 189.685312][ T7796] OQ6b" [ 189.812182][ T4248] ocfs2: Unmounting device (7,1) on (node local) [ 190.146873][ T7826] loop0: detected capacity change from 0 to 2048 [ 190.243331][ T7826] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 190.288087][ T7826] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.355311][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 190.355328][ T27] audit: type=1326 audit(1745576867.211:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296918e969 code=0x7ffc0000 [ 190.427766][ T27] audit: type=1326 audit(1745576867.221:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f296918e969 code=0x7ffc0000 [ 190.586758][ T27] audit: type=1326 audit(1745576867.221:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296918e969 code=0x7ffc0000 [ 190.685025][ T27] audit: type=1326 audit(1745576867.221:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296918e969 code=0x7ffc0000 [ 191.232931][ T7830] loop4: detected capacity change from 0 to 32768 [ 191.291633][ T7830] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1578 (7830) [ 191.353835][ T7830] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.401404][ T7830] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 191.456996][ T7830] BTRFS info (device loop4): using free space tree [ 191.521836][ T7867] loop2: detected capacity change from 0 to 256 [ 191.723162][ T7877] loop0: detected capacity change from 0 to 1764 [ 191.811166][ T7843] loop3: detected capacity change from 0 to 32768 [ 191.842812][ T7830] BTRFS info (device loop4): enabling ssd optimizations [ 191.952408][ T7877] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 192.263943][ T4259] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.183586][ T7923] loop2: detected capacity change from 0 to 764 [ 193.247766][ T7923] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 193.320981][ T7923] Symlink component flag not implemented [ 193.366841][ T7923] Symlink component flag not implemented (122) [ 193.383191][ T27] audit: type=1400 audit(1745576870.241:42): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7930 comm="syz.4.1618" [ 193.696119][ T7937] loop1: detected capacity change from 0 to 4096 [ 193.729426][ T7937] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 193.846198][ T7937] ntfs3: loop1: failed to convert "c46c" to cp437 [ 193.942169][ T7951] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 193.994626][ T7951] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 194.164443][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.171176][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.194531][ T7955] loop0: detected capacity change from 0 to 1024 [ 194.325069][ T7955] hfsplus: request for non-existent node 768 in B*Tree [ 194.368746][ T7955] hfsplus: request for non-existent node 768 in B*Tree [ 194.595999][ T11] hfsplus: b-tree write err: -5, ino 4 [ 194.650023][ T7965] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 194.920059][ T7975] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 194.975046][ T7975] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 195.456817][ T4295] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 195.538345][ T7997] loop1: detected capacity change from 0 to 1024 [ 195.656873][ T4295] usb 1-1: Using ep0 maxpacket: 16 [ 195.664105][ T4295] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.688386][ T4295] usb 1-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=36.cd [ 195.719047][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.747075][ T4295] usb 1-1: Product: syz [ 195.757117][ T4295] usb 1-1: Manufacturer: syz [ 195.772000][ T4295] usb 1-1: SerialNumber: syz [ 195.806034][ T4295] usb 1-1: config 0 descriptor?? [ 195.819401][ T8005] loop2: detected capacity change from 0 to 256 [ 195.840778][ T4295] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 195.846791][ T5807] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 195.861461][ T4295] command write [95] error -22 [ 195.974121][ T8005] FAT-fs (loop2): Directory bread(block 64) failed [ 195.994607][ T8005] FAT-fs (loop2): Directory bread(block 65) failed [ 196.004030][ T8005] FAT-fs (loop2): Directory bread(block 66) failed [ 196.022109][ T8005] FAT-fs (loop2): Directory bread(block 67) failed [ 196.030048][ T4295] usb 1-1: USB disconnect, device number 6 [ 196.030373][ T8005] FAT-fs (loop2): Directory bread(block 68) failed [ 196.054275][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 196.085764][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 196.106190][ T8005] FAT-fs (loop2): Directory bread(block 69) failed [ 196.112955][ T8005] FAT-fs (loop2): Directory bread(block 70) failed [ 196.126830][ T5807] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.146822][ T8005] FAT-fs (loop2): Directory bread(block 71) failed [ 196.153961][ T8005] FAT-fs (loop2): Directory bread(block 72) failed [ 196.155769][ T5807] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 196.170107][ T8005] FAT-fs (loop2): Directory bread(block 73) failed [ 196.227172][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.237247][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 196.243308][ T4264] Bluetooth: hci4: command 0x0406 tx timeout [ 196.249661][ T4260] Bluetooth: hci3: command 0x0406 tx timeout [ 196.249833][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 196.269100][ T5807] usb 2-1: config 0 descriptor?? [ 196.291059][ T5807] gspca_main: spca561-2.14.0 probing abcd:cdee [ 196.410018][ T7995] loop4: detected capacity change from 0 to 32768 [ 196.432920][ T7995] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 196.450485][ T7995] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 196.489301][ T5807] spca561: probe of 2-1:0.0 failed with error -22 [ 196.504145][ T5807] usb 2-1: MIDIStreaming interface descriptor not found [ 196.517129][ T7995] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 196.531568][ T5806] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 196.538648][ T5806] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 196.582780][ T5807] usb 2-1: USB disconnect, device number 7 [ 196.771611][ T5806] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 232ms [ 196.796261][ T5806] gfs2: fsid=syz:syz.0: jid=0: Done [ 196.806874][ T7995] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 196.845457][ T8015] unsupported nla_type 39 [ 197.070543][ T8021] loop0: detected capacity change from 0 to 64 [ 197.306000][ T7995] gfs2: fsid=syz:syz.0: found 1 quota changes [ 197.400298][ T8029] loop1: detected capacity change from 0 to 512 [ 197.482223][ T7995] gfs2: fsid=syz:syz.0: gfs2_check_dirent: name length is greater than space in dirent (first in block) [ 197.523747][ T8029] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 197.569287][ T8029] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.634845][ T7995] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 197.634845][ T7995] inode = 12 2341 [ 197.634845][ T7995] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 197.718274][ T8029] Quota error (device loop1): write_blk: dquota write failed [ 197.726297][ T8029] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 197.739796][ T7995] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 197.769725][ T8029] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 197.771029][ T7995] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:7995 [syz.4.1649] __gfs2_lookup+0x8c/0x260 [ 197.810865][ T8029] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.1663: Failed to acquire dquot type 1 [ 197.840056][ T7995] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 197.860901][ T7995] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 197.913356][ T7995] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 197.951462][ T7995] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 197.970597][ T7995] gfs2: fsid=syz:syz.0: File system withdrawn [ 197.986752][ T7995] CPU: 0 PID: 7995 Comm: syz.4.1649 Not tainted 6.1.135-syzkaller #0 [ 197.994891][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 198.004979][ T7995] Call Trace: [ 198.008294][ T7995] [ 198.011256][ T7995] dump_stack_lvl+0x168/0x22e [ 198.015984][ T7995] ? kobject_uevent_env+0x35f/0x8a0 [ 198.021225][ T7995] ? show_regs_print_info+0x12/0x12 [ 198.026467][ T7995] ? load_image+0x3b0/0x3b0 [ 198.031008][ T7995] ? kobject_uevent_env+0x35f/0x8a0 [ 198.036256][ T7995] gfs2_withdraw+0x143f/0x1780 [ 198.041130][ T7995] ? gfs2_lm+0x220/0x220 [ 198.045409][ T7995] ? load_image+0x3b0/0x3b0 [ 198.049949][ T7995] ? gfs2_consist_inode_i+0xf1/0x110 [ 198.055266][ T7995] gfs2_dirent_scan+0x525/0x650 [ 198.060138][ T7995] ? gfs2_dirent_search+0x7e0/0x7e0 [ 198.065362][ T7995] ? gfs2_dirent_search+0x7e0/0x7e0 [ 198.070580][ T7995] gfs2_dirent_search+0x2dd/0x7e0 [ 198.075630][ T7995] ? gfs2_permission+0x3f1/0x4c0 [ 198.080581][ T7995] ? gfs2_dir_search+0x220/0x220 [ 198.085535][ T7995] ? gfs2_lookupi+0x640/0x640 [ 198.090228][ T7995] gfs2_dir_search+0x49/0x220 [ 198.094924][ T7995] gfs2_lookupi+0x45f/0x640 [ 198.099446][ T7995] ? gfs2_lookup_simple+0xf0/0xf0 [ 198.104478][ T7995] ? d_alloc_parallel+0x136f/0x1480 [ 198.109694][ T7995] ? __gfs2_lookup+0x8c/0x260 [ 198.114387][ T7995] ? d_alloc_parallel+0x2d4/0x1480 [ 198.119512][ T7995] __gfs2_lookup+0x8c/0x260 [ 198.124025][ T7995] ? lockdep_softirqs_off+0x420/0x420 [ 198.129418][ T7995] ? gfs2_atomic_open+0x210/0x210 [ 198.134460][ T7995] ? __init_waitqueue_head+0xa5/0x150 [ 198.139847][ T7995] __lookup_slow+0x27d/0x3a0 [ 198.144448][ T7995] ? lookup_one_len+0x2c0/0x2c0 [ 198.149321][ T7995] ? preempt_count_add+0x8d/0x190 [ 198.154359][ T7995] ? down_read+0x1a8/0x2d0 [ 198.158788][ T7995] lookup_slow+0x53/0x70 [ 198.163042][ T7995] walk_component+0x2be/0x3f0 [ 198.168077][ T7995] ? path_lookupat+0x15c/0x440 [ 198.172852][ T7995] path_lookupat+0x169/0x440 [ 198.177459][ T7995] filename_lookup+0x1f0/0x500 [ 198.182236][ T7995] ? hashlen_string+0x110/0x110 [ 198.187114][ T7995] ? strncpy_from_user+0x1e3/0x350 [ 198.192419][ T7995] ? getname_flags+0x206/0x500 [ 198.197195][ T7995] user_path_at_empty+0x3e/0x60 [ 198.202057][ T7995] do_sys_truncate+0xa3/0x190 [ 198.206748][ T7995] ? break_lease+0xd0/0xd0 [ 198.211178][ T7995] ? lockdep_hardirqs_on+0x94/0x140 [ 198.216397][ T7995] do_syscall_64+0x4c/0xa0 [ 198.220822][ T7995] ? clear_bhb_loop+0x45/0xa0 [ 198.225520][ T7995] ? clear_bhb_loop+0x45/0xa0 [ 198.230203][ T7995] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.236112][ T7995] RIP: 0033:0x7f509838e969 [ 198.240538][ T7995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.260183][ T7995] RSP: 002b:00007f5099160038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 198.268615][ T7995] RAX: ffffffffffffffda RBX: 00007f50985b5fa0 RCX: 00007f509838e969 [ 198.276605][ T7995] RDX: 0000000000000000 RSI: 0000000000007fff RDI: 0000200000000040 [ 198.284613][ T7995] RBP: 00007f5098410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 198.292612][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.300597][ T7995] R13: 0000000000000000 R14: 00007f50985b5fa0 R15: 00007ffcc5b373d8 [ 198.308596][ T7995] [ 198.325366][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 198.430467][ T4259] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 198.465970][ T4259] CPU: 1 PID: 4259 Comm: syz-executor Not tainted 6.1.135-syzkaller #0 [ 198.474289][ T4259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 198.484413][ T4259] Call Trace: [ 198.487716][ T4259] [ 198.490666][ T4259] dump_stack_lvl+0x168/0x22e [ 198.495381][ T4259] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 198.500539][ T4259] ? show_regs_print_info+0x12/0x12 [ 198.505791][ T4259] ? load_image+0x3b0/0x3b0 [ 198.510344][ T4259] ? do_raw_spin_unlock+0x11d/0x230 [ 198.515603][ T4259] gfs2_assert_warn_i+0x18f/0x2c0 [ 198.520675][ T4259] gfs2_quota_cleanup+0x4b4/0x6a0 [ 198.525756][ T4259] gfs2_put_super+0x22f/0x8c0 [ 198.530487][ T4259] ? gfs2_evict_inode+0x1170/0x1170 [ 198.535734][ T4259] generic_shutdown_super+0x130/0x340 [ 198.541149][ T4259] kill_block_super+0x7c/0xe0 [ 198.545866][ T4259] deactivate_locked_super+0x93/0xf0 [ 198.551190][ T4259] cleanup_mnt+0x463/0x4f0 [ 198.555650][ T4259] ? lockdep_hardirqs_on+0x94/0x140 [ 198.560897][ T4259] task_work_run+0x1ca/0x250 [ 198.565535][ T4259] ? task_work_cancel+0x230/0x230 [ 198.570612][ T4259] ? exit_to_user_mode_loop+0x3b/0x110 [ 198.576123][ T4259] exit_to_user_mode_loop+0xe6/0x110 [ 198.581455][ T4259] exit_to_user_mode_prepare+0xb1/0x140 [ 198.587043][ T4259] syscall_exit_to_user_mode+0x16/0x40 [ 198.592547][ T4259] do_syscall_64+0x58/0xa0 [ 198.597094][ T4259] ? clear_bhb_loop+0x45/0xa0 [ 198.601796][ T4259] ? clear_bhb_loop+0x45/0xa0 [ 198.606500][ T4259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.612438][ T4259] RIP: 0033:0x7f509838fc97 [ 198.616879][ T4259] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 198.636584][ T4259] RSP: 002b:00007ffcc5b36668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 198.645035][ T4259] RAX: 0000000000000000 RBX: 00007f509841089d RCX: 00007f509838fc97 [ 198.653082][ T4259] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc5b36720 [ 198.661087][ T4259] RBP: 00007ffcc5b36720 R08: 0000000000000000 R09: 0000000000000000 [ 198.669085][ T4259] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc5b377b0 [ 198.677079][ T4259] R13: 00007f509841089d R14: 00000000000303e8 R15: 00007ffcc5b377f0 [ 198.685096][ T4259] [ 198.688202][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.695875][ T27] audit: type=1326 audit(1745576875.551:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.0.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49538e969 code=0x7ffc0000 [ 198.742924][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1678'. [ 198.806890][ T27] audit: type=1326 audit(1745576875.551:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.0.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49538e969 code=0x7ffc0000 [ 198.820394][ T8063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1680'. [ 198.914822][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1684'. [ 199.430809][ T27] audit: type=1326 audit(1745576876.291:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296918e969 code=0x7ffc0000 [ 199.526824][ T27] audit: type=1326 audit(1745576876.291:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296918e969 code=0x7ffc0000 [ 199.621245][ T27] audit: type=1326 audit(1745576876.331:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f296918e969 code=0x7ffc0000 [ 199.653525][ T8091] loop0: detected capacity change from 0 to 64 [ 199.720722][ T27] audit: type=1326 audit(1745576876.331:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296918e969 code=0x7ffc0000 [ 199.786735][ T27] audit: type=1326 audit(1745576876.331:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296918e969 code=0x7ffc0000 [ 199.925644][ T8102] ceph: Path missing in source [ 200.016676][ T952] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 200.169195][ T8113] loop4: detected capacity change from 0 to 8 [ 200.196894][ T5806] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 200.216911][ T952] usb 4-1: Using ep0 maxpacket: 16 [ 200.237579][ T952] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 200.250830][ T8113] SQUASHFS error: Failed to read block 0x4de: -5 [ 200.266147][ T952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.275960][ T952] usb 4-1: Product: syz [ 200.282262][ T8113] SQUASHFS error: Failed to read block 0x4de: -5 [ 200.289418][ T952] usb 4-1: Manufacturer: syz [ 200.295499][ T952] usb 4-1: SerialNumber: syz [ 200.302912][ T8113] SQUASHFS error: Failed to read block 0x4de: -5 [ 200.303581][ T8115] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1705'. [ 200.316020][ T8113] SQUASHFS error: Failed to read block 0x4de: -5 [ 200.334204][ T952] usb 4-1: config 0 descriptor?? [ 200.358841][ T8113] SQUASHFS error: Failed to read block 0x4de: -5 [ 200.376801][ T952] as10x_usb: device has been detected [ 200.385195][ T952] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 200.403452][ T5806] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 200.413394][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.426718][ T5806] usb 2-1: Product: syz [ 200.430933][ T5806] usb 2-1: Manufacturer: syz [ 200.453773][ T5806] usb 2-1: SerialNumber: syz [ 200.472006][ T952] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 200.487783][ T5806] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 200.556140][ T8095] random: crng reseeded on system resumption [ 200.576547][ T952] as10x_usb: error during firmware upload part1 [ 200.584013][ T952] Registered device Sky IT Digital Key (green led) [ 200.598782][ T5807] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 200.820425][ T8124] bridge0: port 3(macvlan0) entered blocking state [ 200.833326][ T8124] bridge0: port 3(macvlan0) entered disabled state [ 200.853861][ T8126] loop0: detected capacity change from 0 to 1024 [ 200.888619][ T8124] device macvlan0 entered promiscuous mode [ 200.895877][ T8124] bridge0: port 3(macvlan0) entered blocking state [ 200.902584][ T8124] bridge0: port 3(macvlan0) entered forwarding state [ 200.914371][ T8126] EXT4-fs: Ignoring removed nobh option [ 200.982111][ T8126] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 201.039112][ T5806] usb 2-1: USB disconnect, device number 8 [ 201.079848][ T8126] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.1710: Failed to acquire dquot type 1 [ 201.111967][ T8132] [U] 1WT`8H$09\ [ 201.118700][ T8132] [U] ;2}ugVĥ#O9ե>-Sݢp [ 201.129931][ T8132] [U] 4XZ^Y)ഴmc. opOW [ 201.136248][ T8132] [U] %Z [ 201.139471][ T8132] [U] 8`}[Tj#Z~3µݥI~D%8@7j|{9dce+Ok?%6 [ 201.147229][ T8132] [U] p>BЍZ% [ 201.151065][ T8132] [U] i)=#f/uI~)yS=׊4Fx&%$K '.7*9|Au\pv| [ 201.161320][ T8132] [U] K [ 201.213207][ T8132] [U] oW.w Zg д$jyR7/1Zt7L[+ [ 201.235315][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 201.247267][ T8132] [U] ^ [ 201.267080][ T8132] [U] t!#Ӈŵ$BIN,<T[:D#8(e"6YEFL&1Y¯0dBb1ʶ84+N3=Ci/6}ar- -oI9mZ [ 201.296794][ T8132] [U] ,8Op9ugtxf])A3_ D"ȈXXzD !WA 9@ق3X+Zao]8Xx{( ))27y 3,!KW(cѱie\Amcu0*%ɍOhc|;xck@vNQZ [ 201.315873][ T8132] [U] 壒d炍`=N<긲]Q [ 201.321288][ T8132] [U] KEzF9Ǩ{ [ 201.361916][ T8131] [U] ZI]?.|"%B)`ݾ6vo}'Vi\m;S qSK3DY_-t40 oPep<!au> z6 [ 201.676842][ T4965] usb 4-1: USB disconnect, device number 9 [ 201.676868][ T5807] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 201.706817][ T5807] ath9k_htc: Failed to initialize the device [ 201.714487][ T5806] usb 2-1: ath9k_htc: USB layer deinitialized [ 201.751391][ T4965] Unregistered device Sky IT Digital Key (green led) [ 201.779545][ T4965] as10x_usb: device has been disconnected [ 201.876898][ T4328] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 202.073298][ T4328] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 202.091739][ T4328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.091792][ T8160] netlink: 'syz.2.1725': attribute type 3 has an invalid length. [ 202.118003][ T4328] usb 1-1: config 0 descriptor?? [ 202.135501][ T4328] gspca_main: spca508-2.14.0 probing 8086:0110 [ 202.160817][ T8162] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 202.544499][ T4328] gspca_spca508: reg_read err -71 [ 202.558530][ T4328] gspca_spca508: reg_read err -71 [ 202.575921][ T4328] gspca_spca508: reg_read err -71 [ 202.605094][ T4328] gspca_spca508: reg_read err -71 [ 202.624712][ T4328] gspca_spca508: reg write: error -71 [ 202.637408][ T4328] spca508: probe of 1-1:0.0 failed with error -71 [ 202.664458][ T4328] usb 1-1: USB disconnect, device number 7 [ 202.680182][ T8176] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1734'. [ 202.856413][ T8180] netlink: 'syz.4.1736': attribute type 12 has an invalid length. [ 202.890361][ T8180] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1736'. [ 203.296676][ T4328] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 203.446886][ T952] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 203.502546][ T4328] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 203.519641][ T4328] usb 4-1: config 0 has no interface number 0 [ 203.536714][ T4328] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 203.568973][ T4328] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 203.607635][ T4328] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 203.629914][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 203.646843][ T952] usb 2-1: Using ep0 maxpacket: 16 [ 203.647768][ T4328] usb 4-1: Product: syz [ 203.654642][ T952] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 203.656199][ T4328] usb 4-1: SerialNumber: syz [ 203.679441][ T952] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 203.691613][ T4328] usb 4-1: config 0 descriptor?? [ 203.706862][ T952] usb 2-1: config 0 interface 0 has no altsetting 0 [ 203.727240][ T4328] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 203.735152][ T4328] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input9 [ 203.746402][ T952] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 203.786829][ T952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.833980][ T952] usb 2-1: Product: syz [ 203.842852][ T952] usb 2-1: Manufacturer: syz [ 203.855842][ T952] usb 2-1: SerialNumber: syz [ 203.897609][ T952] usb 2-1: config 0 descriptor?? [ 203.936888][ T4295] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 203.998834][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 204.113531][ T8224] loop0: detected capacity change from 0 to 256 [ 204.126889][ T4295] usb 3-1: Using ep0 maxpacket: 16 [ 204.143338][ T4295] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 204.166922][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.175013][ T4295] usb 3-1: Product: syz [ 204.184351][ T4295] usb 3-1: Manufacturer: syz [ 204.196261][ T8224] FAT-fs (loop0): Directory bread(block 64) failed [ 204.200260][ T4295] usb 3-1: SerialNumber: syz [ 204.210175][ T8224] FAT-fs (loop0): Directory bread(block 65) failed [ 204.230858][ T8224] FAT-fs (loop0): Directory bread(block 66) failed [ 204.235734][ T4295] r8152-cfgselector 3-1: config 0 descriptor?? [ 204.246002][ T8224] FAT-fs (loop0): Directory bread(block 67) failed [ 204.246993][ T4966] usb 4-1: USB disconnect, device number 10 [ 204.256229][ T8224] FAT-fs (loop0): Directory bread(block 68) failed [ 204.273681][ T4966] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 204.285703][ T8224] FAT-fs (loop0): Directory bread(block 69) failed [ 204.298580][ T8224] FAT-fs (loop0): Directory bread(block 70) failed [ 204.305507][ T8224] FAT-fs (loop0): Directory bread(block 71) failed [ 204.312811][ T8224] FAT-fs (loop0): Directory bread(block 72) failed [ 204.319862][ T8224] FAT-fs (loop0): Directory bread(block 73) failed [ 204.367310][ T4328] usb 2-1: USB disconnect, device number 9 [ 204.473596][ T4295] r8152-cfgselector 3-1: Unknown version 0x0000 [ 204.684880][ T4295] r8152-cfgselector 3-1: Unknown version 0x0000 [ 204.692759][ T4295] r8152-cfgselector 3-1: bad CDC descriptors [ 204.712165][ T4295] r8152-cfgselector 3-1: Unknown version 0x0000 [ 204.737099][ T4295] r8152-cfgselector 3-1: USB disconnect, device number 8 [ 204.937976][ T8238] loop3: detected capacity change from 0 to 256 [ 205.014662][ T8238] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 205.473641][ T8258] loop2: detected capacity change from 0 to 256 [ 206.092158][ T8278] loop4: detected capacity change from 0 to 64 [ 206.735996][ T8300] loop1: detected capacity change from 0 to 128 [ 206.755603][ T8302] loop3: detected capacity change from 0 to 256 [ 206.774004][ T8264] loop0: detected capacity change from 0 to 32768 [ 206.784435][ T8300] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 206.815639][ T8300] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.915801][ T8264] XFS (loop0): Mounting V5 Filesystem [ 206.937703][ T8311] binder: Bad value for 'stats' [ 207.080487][ T8264] XFS (loop0): Ending clean mount [ 207.347982][ T8328] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 207.415594][ T4249] XFS (loop0): Unmounting Filesystem [ 207.648949][ T8336] hsr0: VLAN not yet supported [ 207.686640][ T4328] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 207.843310][ T8342] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1809'. [ 207.886679][ T4328] usb 3-1: Using ep0 maxpacket: 8 [ 207.898176][ T4328] usb 3-1: config 0 has an invalid interface number: 37 but max is 2 [ 207.900210][ T8340] loop4: detected capacity change from 0 to 4096 [ 207.906286][ T4328] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 207.906312][ T4328] usb 3-1: config 0 has no interface number 1 [ 207.915500][ T4328] usb 3-1: New USB device found, idVendor=087d, idProduct=5704, bcdDevice=be.0e [ 208.015516][ T4328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.053878][ T4328] usb 3-1: Product: syz [ 208.071824][ T4328] usb 3-1: Manufacturer: syz [ 208.103796][ T4328] usb 3-1: SerialNumber: syz [ 208.121243][ T4328] usb 3-1: config 0 descriptor?? [ 208.195712][ T8350] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1813'. [ 208.366270][ T4328] kaweth 3-1:0.37: Firmware present in device. [ 208.388982][ T8354] loop0: detected capacity change from 0 to 256 [ 208.486887][ T8354] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 208.577884][ T4328] kaweth 3-1:0.37: Error reading configuration (-71), no net device created [ 208.596824][ T4328] kaweth: probe of 3-1:0.37 failed with error -5 [ 208.663303][ T4328] kaweth 3-1:0.0: Firmware present in device. [ 208.691521][ T4328] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 208.722042][ T4328] kaweth: probe of 3-1:0.0 failed with error -5 [ 208.785999][ T4328] usb 3-1: USB disconnect, device number 9 [ 208.837869][ T8366] loop0: detected capacity change from 0 to 2048 [ 208.937484][ T8371] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.977962][ T8366] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 209.017242][ T8366] Remounting filesystem read-only [ 209.031657][ T8366] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 209.210858][ T8379] loop3: detected capacity change from 0 to 64 [ 209.470639][ T8389] netlink: 'syz.1.1831': attribute type 4 has an invalid length. [ 209.783820][ T8396] loop2: detected capacity change from 0 to 2048 [ 209.823121][ T8396] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.189237][ T8415] loop2: detected capacity change from 0 to 16 [ 210.203426][ T8412] loop3: detected capacity change from 0 to 1024 [ 210.215948][ T8415] erofs: (device loop2): mounted with root inode @ nid 36. [ 210.274810][ T8415] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 210.335016][ T8412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 210.340206][ T8415] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -57 in[61, 4035] out[1851] [ 210.395003][ T8415] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 210.458026][ T8412] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 623: comm syz.3.1843: Attempting to read directory block (623) that is past i_size (638464) [ 210.514859][ T8427] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1848'. [ 210.595293][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 211.060616][ T8446] netlink: 'syz.1.1857': attribute type 1 has an invalid length. [ 212.045232][ T8488] (syz.2.1881,8488,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 212.092584][ T8488] (syz.2.1881,8488,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 212.160651][ T8494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1878'. [ 212.488275][ T8505] loop4: detected capacity change from 0 to 128 [ 212.541811][ T8505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 212.561918][ T8505] ext4 filesystem being mounted at /394/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.611302][ T8505] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 1029 (only 1 groups) [ 212.692541][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 212.876931][ T5806] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 212.978816][ T8520] loop4: detected capacity change from 0 to 4096 [ 212.994378][ T8520] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 213.092985][ T5806] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 213.107567][ T8520] ntfs3: loop4: ino=1e, "file1" encrypted i/o not supported [ 213.114189][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.129384][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 213.129401][ T27] audit: type=1800 audit(1745576889.991:51): pid=8520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1893" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 213.182004][ T5806] usb 1-1: Product: syz [ 213.186254][ T5806] usb 1-1: Manufacturer: syz [ 213.191321][ T5806] usb 1-1: SerialNumber: syz [ 213.227316][ T5806] usb 1-1: config 0 descriptor?? [ 213.260022][ T8524] loop3: detected capacity change from 0 to 8192 [ 213.297882][ T8524] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.425114][ T8534] loop2: detected capacity change from 0 to 16 [ 213.428366][ T8532] loop4: detected capacity change from 0 to 512 [ 213.445814][ T8534] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 213.465132][ T5806] usb-storage 1-1:0.0: USB Mass Storage device detected [ 213.568635][ T8532] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1899: invalid indirect mapped block 256 (level 2) [ 213.606370][ T8532] EXT4-fs (loop4): Remounting filesystem read-only [ 213.614106][ T8532] EXT4-fs (loop4): 2 truncates cleaned up [ 213.620630][ T8532] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 213.696986][ T4295] usb 1-1: USB disconnect, device number 8 [ 213.707574][ T8532] EXT4-fs error (device loop4): empty_inline_dir:1877: inode #12: block 7: comm syz.4.1899: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 213.781858][ T8532] EXT4-fs (loop4): Remounting filesystem read-only [ 213.785101][ T8543] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 213.830812][ T8532] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 213.969165][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 214.058112][ T8551] loop2: detected capacity change from 0 to 1764 [ 214.388655][ T27] audit: type=1326 audit(1745576891.251:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49538e969 code=0x7ffc0000 [ 214.466728][ T27] audit: type=1326 audit(1745576891.281:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd49538e969 code=0x7ffc0000 [ 214.546727][ T27] audit: type=1326 audit(1745576891.281:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49538e969 code=0x7ffc0000 [ 214.656695][ T27] audit: type=1326 audit(1745576891.281:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49538e969 code=0x7ffc0000 [ 214.816854][ T8575] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1918'. [ 215.035101][ T8550] loop1: detected capacity change from 0 to 32768 [ 215.093749][ T8550] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1905 (8550) [ 215.225794][ T8550] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 215.255213][ T8550] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 215.292586][ T8550] BTRFS info (device loop1): using free space tree [ 215.666144][ T8608] loop0: detected capacity change from 0 to 16 [ 215.721729][ T8608] erofs: (device loop0): mounted with root inode @ nid 36. [ 215.846831][ T8550] BTRFS info (device loop1): enabling ssd optimizations [ 215.990192][ T4248] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 216.086710][ T4328] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 216.293774][ T4328] usb 4-1: Using ep0 maxpacket: 32 [ 216.317322][ T4328] usb 4-1: unable to get BOS descriptor or descriptor too short [ 216.347585][ T4328] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 216.356161][ T4328] usb 4-1: config 7 has no interface number 0 [ 216.394390][ T4328] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 216.415047][ T4328] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 216.444465][ T4328] usb 4-1: config 7 interface 187 has no altsetting 0 [ 216.490522][ T4328] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 216.509693][ T4328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.526901][ T4328] usb 4-1: Product: syz [ 216.537602][ T4328] usb 4-1: Manufacturer: syz [ 216.557116][ T4328] usb 4-1: SerialNumber: syz [ 216.591248][ T8620] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 216.632281][ T8620] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 216.910339][ T4328] usb 4-1: Limiting number of CPorts to U8_MAX [ 216.941822][ T4328] usb 4-1: Unknown endpoint type found, address 0x07 [ 216.950970][ T4328] usb 4-1: Unused bulk OUT endpoint found: 0x03 [ 216.968238][ T4328] usb 4-1: Not enough endpoints found in device, aborting! [ 217.187738][ T952] usb 4-1: USB disconnect, device number 11 [ 217.874490][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1963'. [ 217.910130][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1963'. [ 218.049476][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1975'. [ 218.126867][ T8661] loop1: detected capacity change from 0 to 32768 [ 218.270522][ T8697] loop3: detected capacity change from 0 to 128 [ 218.388435][ T8697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 218.447834][ T8697] ext4 filesystem being mounted at /370/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 218.728436][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 218.979339][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'. [ 219.263715][ T8732] loop0: detected capacity change from 0 to 256 [ 219.346974][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1987'. [ 219.415446][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1987'. [ 219.444097][ T8737] netlink: 'syz.1.1987': attribute type 6 has an invalid length. [ 219.480528][ T8739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1988'. [ 219.503762][ T8739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1988'. [ 219.727963][ T8749] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 219.867525][ T8755] loop4: detected capacity change from 0 to 512 [ 219.959845][ T8755] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 220.036828][ T8755] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 220.107474][ T8755] EXT4-fs (loop4): 1 truncate cleaned up [ 220.118879][ T8755] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 220.178800][ T8755] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 220.317649][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 220.810685][ T8792] netlink: 'syz.3.2012': attribute type 1 has an invalid length. [ 220.867723][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 220.942993][ T8797] loop0: detected capacity change from 0 to 8 [ 221.015061][ T8797] SQUASHFS error: Failed to read block 0x4de: -5 [ 221.043315][ T8797] SQUASHFS error: Failed to read block 0x4de: -5 [ 221.061529][ T8797] SQUASHFS error: Failed to read block 0x4de: -5 [ 221.113409][ T8797] SQUASHFS error: Failed to read block 0x4de: -5 [ 221.143105][ T8797] SQUASHFS error: Failed to read block 0x4de: -5 [ 221.167007][ T27] audit: type=1800 audit(1745576898.031:56): pid=8797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2025" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 221.413810][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2023'. [ 221.423881][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2022'. [ 221.556702][ T5806] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 221.604811][ T8817] bridge0: port 4(macvlan0) entered blocking state [ 221.616893][ T8817] bridge0: port 4(macvlan0) entered disabled state [ 221.624695][ T8817] device macvlan0 entered promiscuous mode [ 221.651523][ T8817] bridge0: port 4(macvlan0) entered blocking state [ 221.658221][ T8817] bridge0: port 4(macvlan0) entered forwarding state [ 221.746800][ T5806] usb 2-1: Using ep0 maxpacket: 32 [ 221.759098][ T5806] usb 2-1: unable to get BOS descriptor or descriptor too short [ 221.805832][ T5806] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 221.830438][ T5806] usb 2-1: config 7 has no interface number 0 [ 221.847413][ T5806] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 221.872668][ T5806] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 221.888387][ T5806] usb 2-1: config 7 interface 187 has no altsetting 0 [ 221.917041][ T5806] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 221.930912][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.962467][ T5806] usb 2-1: Product: syz [ 221.969564][ T5806] usb 2-1: Manufacturer: syz [ 221.989615][ T5806] usb 2-1: SerialNumber: syz [ 222.023106][ T8806] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 222.035841][ T8806] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 222.263098][ T5806] usb 2-1: Limiting number of CPorts to U8_MAX [ 222.276730][ T952] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 222.302867][ T5806] usb 2-1: Unknown endpoint type found, address 0x07 [ 222.312820][ T5806] usb 2-1: Unused bulk OUT endpoint found: 0x03 [ 222.321121][ T5806] usb 2-1: Not enough endpoints found in device, aborting! [ 222.493661][ T952] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 222.516686][ T952] usb 5-1: config 0 has no interface number 0 [ 222.523494][ T952] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 222.525008][ T5327] usb 2-1: USB disconnect, device number 10 [ 222.596629][ T952] usb 5-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 222.638292][ T952] usb 5-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 222.676884][ T952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.684956][ T952] usb 5-1: Product: syz [ 222.700714][ T952] usb 5-1: Manufacturer: syz [ 222.705640][ T952] usb 5-1: SerialNumber: syz [ 222.740990][ T952] usb 5-1: config 0 descriptor?? [ 222.746959][ T8826] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 222.900791][ T8844] loop0: detected capacity change from 0 to 1024 [ 222.934847][ T8844] EXT4-fs: Ignoring removed orlov option [ 222.961186][ T8844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.990221][ T952] kaweth 5-1:0.58: Firmware present in device. [ 223.014622][ T8848] netlink: 'syz.2.2041': attribute type 1 has an invalid length. [ 223.027261][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'. [ 223.037947][ T8844] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 223.186996][ T952] kaweth 5-1:0.58: Error reading configuration (-71), no net device created [ 223.206733][ T952] kaweth: probe of 5-1:0.58 failed with error -5 [ 223.236847][ T952] usb 5-1: USB disconnect, device number 8 [ 223.290595][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 223.310828][ T8855] tmpfs: Bad value for 'mpol' [ 223.328433][ T8853] loop2: detected capacity change from 0 to 1024 [ 223.363041][ T8840] loop3: detected capacity change from 0 to 32768 [ 223.429304][ T8840] [ 223.429304][ T8840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.429304][ T8840] [ 223.476941][ T8853] syz.2.2042: attempt to access beyond end of device [ 223.476941][ T8853] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 223.515806][ T8840] jfs_lookup: dtSearch returned -5 [ 223.546918][ T8853] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 223.555655][ T8853] hfsplus: unable to mark blocks free: error -5 [ 223.618230][ T8853] hfsplus: can't free extent [ 223.649334][ T8861] loop1: detected capacity change from 0 to 64 [ 223.667084][ T4250] [ 223.667084][ T4250] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.667084][ T4250] [ 223.697259][ T4250] [ 223.697259][ T4250] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 223.697259][ T4250] [ 223.911038][ T8863] loop0: detected capacity change from 0 to 4096 [ 223.950683][ T8863] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 224.057611][ T8863] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 224.083334][ T8863] ntfs3: loop0: Failed to load $Extend. [ 224.279905][ T8875] loop4: detected capacity change from 0 to 2048 [ 224.327527][ T8875] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.484307][ T8877] loop3: detected capacity change from 0 to 4096 [ 224.519728][ T8877] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 224.570152][ T8877] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 224.754880][ T8886] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 224.844561][ T4306] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 224.863295][ T4250] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 225.051085][ T27] audit: type=1326 audit(1745576901.911:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49538e969 code=0x7ffc0000 [ 225.186754][ T27] audit: type=1326 audit(1745576901.941:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fd49538e969 code=0x7ffc0000 [ 225.283704][ T8871] loop2: detected capacity change from 0 to 32768 [ 225.297683][ T27] audit: type=1326 audit(1745576901.951:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49538e969 code=0x7ffc0000 [ 225.353728][ T8902] loop0: detected capacity change from 0 to 1024 [ 225.434421][ T27] audit: type=1326 audit(1745576901.951:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49538e969 code=0x7ffc0000 [ 225.554065][ T8908] loop4: detected capacity change from 0 to 16 [ 225.608216][ T8908] erofs: (device loop4): mounted with root inode @ nid 36. [ 225.662028][ T8908] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown HEAD1 format 12 for nid 36, please upgrade kernel [ 225.730756][ T8908] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown HEAD1 format 12 for nid 36, please upgrade kernel [ 225.761101][ T8908] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-95] [ 226.297782][ T8932] x_tables: unsorted entry at hook 3 [ 226.343194][ T8924] loop1: detected capacity change from 0 to 8192 [ 226.423923][ T8924] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 226.529011][ T8924] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 226.586187][ T8924] REISERFS (device loop1): using ordered data mode [ 226.626304][ T8924] reiserfs: using flush barriers [ 226.669603][ T8924] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 226.732780][ T8924] REISERFS (device loop1): checking transaction log (loop1) [ 226.779318][ T8924] REISERFS (device loop1): Using r5 hash to sort names [ 226.788926][ T8924] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 227.515834][ T27] audit: type=1326 audit(1745576904.371:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df5d8e969 code=0x7ffc0000 [ 227.599506][ T27] audit: type=1326 audit(1745576904.391:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f2df5d8e969 code=0x7ffc0000 [ 227.672942][ T27] audit: type=1326 audit(1745576904.391:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df5d8e969 code=0x7ffc0000 [ 227.757091][ T27] audit: type=1326 audit(1745576904.391:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8972 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df5d8e969 code=0x7ffc0000 [ 227.775808][ T8976] loop3: detected capacity change from 0 to 2048 [ 227.859106][ T8981] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.2104'. [ 227.946756][ T8981] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.2104'. [ 227.992783][ T8976] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 228.002936][ T8976] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.027165][ T8976] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2102: bg 0: block 345: padding at end of block bitmap is not set [ 228.096823][ T8976] EXT4-fs (loop3): Remounting filesystem read-only [ 228.151181][ T8954] loop4: detected capacity change from 0 to 32768 [ 228.156028][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2109'. [ 228.262509][ T8954] XFS (loop4): Mounting V5 Filesystem [ 228.277763][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 228.549315][ T9011] autofs4:pid:9011:autofs_fill_super: called with bogus options [ 228.568158][ T8954] XFS (loop4): Ending clean mount [ 228.591463][ T8954] XFS (loop4): Quotacheck needed: Please wait. [ 228.734504][ T8954] XFS (loop4): Quotacheck: Done. [ 228.896215][ T9007] loop1: detected capacity change from 0 to 32768 [ 228.935584][ T4259] XFS (loop4): Unmounting Filesystem [ 228.961939][ T9021] netlink: 'syz.3.2119': attribute type 1 has an invalid length. [ 229.047977][ T9007] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 229.129697][ T9007] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 3630 but max bitmap bits of 2048 [ 229.149069][ T9007] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 229.159867][ T9007] OCFS2: File system is now read-only. [ 229.165447][ T9007] (syz.1.2114,9007,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 229.183172][ T9007] (syz.1.2114,9007,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 229.268435][ T9007] (syz.1.2114,9007,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 229.293993][ T9007] (syz.1.2114,9007,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 229.307177][ T9007] (syz.1.2114,9007,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 229.333822][ T9007] (syz.1.2114,9007,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 229.366086][ T9007] (syz.1.2114,9007,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 229.382610][ T9007] (syz.1.2114,9007,1):ocfs2_mknod:385 ERROR: status = -30 [ 229.408421][ T9007] (syz.1.2114,9007,1):ocfs2_mknod:502 ERROR: status = -30 [ 229.460058][ T9007] (syz.1.2114,9007,1):ocfs2_create:676 ERROR: status = -30 [ 229.560488][ T4248] (syz-executor,4248,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 229.595159][ T4248] ocfs2: Unmounting device (7,1) on (node local) [ 229.720766][ T9035] xt_CT: No such helper "pptp" [ 229.925579][ T9027] loop0: detected capacity change from 0 to 32768 [ 230.131263][ T9047] loop2: detected capacity change from 0 to 1024 [ 230.443959][ T9054] loop4: detected capacity change from 0 to 256 [ 230.568989][ T9054] FAT-fs (loop4): Directory bread(block 64) failed [ 230.590759][ T9054] FAT-fs (loop4): Directory bread(block 65) failed [ 230.616977][ T9054] FAT-fs (loop4): Directory bread(block 66) failed [ 230.638159][ T9054] FAT-fs (loop4): Directory bread(block 67) failed [ 230.644816][ T9054] FAT-fs (loop4): Directory bread(block 68) failed [ 230.652695][ T9054] FAT-fs (loop4): Directory bread(block 69) failed [ 230.659699][ T9054] FAT-fs (loop4): Directory bread(block 70) failed [ 230.666396][ T9054] FAT-fs (loop4): Directory bread(block 71) failed [ 230.697242][ T8643] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 230.729887][ T9054] FAT-fs (loop4): Directory bread(block 72) failed [ 230.736509][ T9054] FAT-fs (loop4): Directory bread(block 73) failed [ 230.896736][ T8643] usb 2-1: Using ep0 maxpacket: 32 [ 230.911474][ T8643] usb 2-1: unable to get BOS descriptor or descriptor too short [ 230.950171][ T8643] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 230.987057][ T8643] usb 2-1: config 7 has no interface number 0 [ 230.993233][ T8643] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 231.048372][ T8643] usb 2-1: config 7 interface 187 has no altsetting 0 [ 231.082430][ T8643] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 231.112367][ T8643] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.172194][ T8643] usb 2-1: Product: syz [ 231.176432][ T8643] usb 2-1: Manufacturer: syz [ 231.207794][ T8643] usb 2-1: SerialNumber: syz [ 231.239587][ T9052] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 231.288629][ T9081] loop4: detected capacity change from 0 to 512 [ 231.380832][ T9081] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 231.435161][ T9081] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 231.446365][ T9081] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.2146: Failed to acquire dquot type 1 [ 231.462317][ T8643] usb 2-1: Limiting number of CPorts to U8_MAX [ 231.465390][ T9081] EXT4-fs (loop4): 1 truncate cleaned up [ 231.474422][ T9081] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 231.479655][ T8643] usb 2-1: Unknown endpoint type found, address 0x07 [ 231.483695][ T9081] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.540720][ T8643] usb 2-1: Not enough endpoints found in device, aborting! [ 231.607201][ T9092] loop0: detected capacity change from 0 to 512 [ 231.615827][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 231.629706][ T9092] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 231.673904][ T8643] usb 2-1: USB disconnect, device number 11 [ 231.774466][ T9092] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 231.860403][ T9092] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.997734][ T9092] EXT4-fs error (device loop0): __ext4_new_inode:1285: comm syz.0.2150: failed to insert inode 16: doubly allocated? [ 232.193010][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 232.458358][ T9121] loop0: detected capacity change from 0 to 1024 [ 232.629521][ T9128] autofs4:pid:9128:autofs_fill_super: called with bogus options [ 233.331432][ T9126] loop4: detected capacity change from 0 to 32768 [ 233.385884][ T9126] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.2165 (9126) [ 233.506489][ T9126] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 233.553112][ T9126] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 233.611828][ T9126] BTRFS info (device loop4): force zlib compression, level 3 [ 233.659100][ T9126] BTRFS info (device loop4): force clearing of disk cache [ 233.694145][ T9126] BTRFS info (device loop4): setting nodatasum [ 233.709990][ T9126] BTRFS info (device loop4): use zlib compression, level 3 [ 233.746819][ T9126] BTRFS info (device loop4): allowing degraded mounts [ 233.804773][ T9126] BTRFS info (device loop4): enabling disk space caching [ 233.820312][ T9126] BTRFS info (device loop4): disk space caching is enabled [ 234.067512][ T9126] BTRFS info (device loop4): enabling ssd optimizations [ 234.084295][ T9126] BTRFS info (device loop4): rebuilding free space tree [ 234.152682][ T9126] BTRFS info (device loop4): disabling free space tree [ 234.183020][ T9126] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 234.187529][ T9196] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2190'. [ 234.203838][ T9126] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 234.258275][ T9198] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2192'. [ 234.464221][ T9204] loop1: detected capacity change from 0 to 8 [ 234.489703][ T4259] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 234.517708][ T9204] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 234.578733][ T9200] loop0: detected capacity change from 0 to 4096 [ 234.628865][ T9200] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 234.649316][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.732390][ T9200] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 234.799475][ T9200] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 234.849952][ T9200] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 234.893954][ T27] audit: type=1326 audit(1745576911.751:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.3.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296918e969 code=0x7ffc0000 [ 234.894571][ T9200] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 234.916238][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.000529][ T27] audit: type=1326 audit(1745576911.751:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.3.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f296918e969 code=0x7ffc0000 [ 235.074631][ T9200] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 235.088171][ T27] audit: type=1326 audit(1745576911.801:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.3.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f296918e969 code=0x7ffc0000 [ 235.136205][ T9200] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 235.189367][ T9200] ntfs: volume version 3.1. [ 235.611369][ T9230] netlink: 'syz.2.2207': attribute type 10 has an invalid length. [ 235.695538][ T9230] team0: Device hsr_slave_0 failed to register rx_handler [ 235.867360][ T9238] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 236.097240][ T9245] loop2: detected capacity change from 0 to 512 [ 236.131736][ T9245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.174780][ T9245] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 236.200031][ T9245] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 236.220902][ T9245] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 236.246837][ T9245] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 236.297413][ T9245] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 236.357054][ T9233] loop4: detected capacity change from 0 to 32768 [ 236.391613][ T9233] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.2208 (9233) [ 236.413107][ T9245] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 236.441832][ T9233] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 236.471179][ T9233] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 236.535973][ T9233] BTRFS info (device loop4): force zlib compression, level 3 [ 236.553852][ T9233] BTRFS info (device loop4): force clearing of disk cache [ 236.586891][ T9233] BTRFS info (device loop4): setting nodatasum [ 236.626833][ T9233] BTRFS info (device loop4): use zlib compression, level 3 [ 236.635186][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 236.682655][ T9233] BTRFS info (device loop4): allowing degraded mounts [ 236.723003][ T9233] BTRFS info (device loop4): enabling disk space caching [ 236.763611][ T9233] BTRFS info (device loop4): disk space caching is enabled [ 237.037424][ T9288] SET target dimension over the limit! [ 237.076983][ T9233] BTRFS info (device loop4): enabling ssd optimizations [ 237.097271][ T9233] BTRFS info (device loop4): rebuilding free space tree [ 237.169908][ T9233] BTRFS info (device loop4): disabling free space tree [ 237.207529][ T9233] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 237.256828][ T9233] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 237.270035][ T9299] loop3: detected capacity change from 0 to 256 [ 237.372415][ T9299] FAT-fs (loop3): Directory bread(block 64) failed [ 237.401471][ T9299] FAT-fs (loop3): Directory bread(block 65) failed [ 237.422030][ T9299] FAT-fs (loop3): Directory bread(block 66) failed [ 237.451364][ T9299] FAT-fs (loop3): Directory bread(block 67) failed [ 237.488198][ T9299] FAT-fs (loop3): Directory bread(block 68) failed [ 237.525473][ T9299] FAT-fs (loop3): Directory bread(block 69) failed [ 237.549512][ T9233] BTRFS info (device loop4): balance: start -f -sdrange=11..18446744073709551610,vrange=5..16,stripes=1831..0 [ 237.556025][ T9299] FAT-fs (loop3): Directory bread(block 70) failed [ 237.570343][ T9233] BTRFS info (device loop4): balance: ended with status: 0 [ 237.643695][ T9299] FAT-fs (loop3): Directory bread(block 71) failed [ 237.660824][ T9299] FAT-fs (loop3): Directory bread(block 72) failed [ 237.701504][ T9299] FAT-fs (loop3): Directory bread(block 73) failed [ 237.869236][ T4259] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 237.920566][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 238.255138][ T9322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.806489][ T9343] device veth1_macvtap left promiscuous mode [ 238.873440][ T9342] loop1: detected capacity change from 0 to 2048 [ 238.934890][ T9342] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.964957][ T9348] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 239.152600][ T9352] loop2: detected capacity change from 0 to 1024 [ 239.275220][ T9354] netlink: 'syz.1.2257': attribute type 1 has an invalid length. [ 239.561770][ T9358] loop3: detected capacity change from 0 to 4096 [ 239.625409][ T9358] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 239.693991][ T9367] ufs: You didn't specify the type of your ufs filesystem [ 239.693991][ T9367] [ 239.693991][ T9367] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 239.693991][ T9367] [ 239.693991][ T9367] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 239.705521][ T9335] loop4: detected capacity change from 0 to 32768 [ 239.826847][ T9335] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2248 (9335) [ 239.871330][ T9367] ufs: ufstype=old is supported read-only [ 239.910626][ T9367] ufs: ufs_fill_super(): bad magic number [ 239.927351][ T9335] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 240.009627][ T9335] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 240.026387][ T9335] BTRFS info (device loop4): using free space tree [ 240.141843][ T9384] loop1: detected capacity change from 0 to 65 [ 240.168295][ T9384] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 240.357047][ T9335] BTRFS info (device loop4): enabling ssd optimizations [ 240.495607][ T9408] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 240.545567][ T9408] overlayfs: missing 'lowerdir' [ 240.587047][ T4259] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 240.685546][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2284'. [ 240.970466][ T9410] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 241.071262][ T9421] netlink: 'syz.4.2275': attribute type 10 has an invalid length. [ 241.147769][ T9423] loop2: detected capacity change from 0 to 64 [ 241.423401][ T9428] loop4: detected capacity change from 0 to 1764 [ 241.493416][ T9399] loop0: detected capacity change from 0 to 32768 [ 241.545233][ T9399] ERROR: (device loop0): diAllocBit: iag inconsistent [ 241.545233][ T9399] [ 241.605054][ T9399] ERROR: (device loop0): remounting filesystem as read-only [ 241.653721][ T9399] ialloc: diAlloc returned -5! [ 241.729246][ T9437] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2285'. [ 241.752989][ T9438] netlink: 'syz.3.2286': attribute type 10 has an invalid length. [ 241.846940][ T9418] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 241.883443][ T9438] team0: Device hsr_slave_0 failed to register rx_handler [ 242.036661][ T9418] usb 2-1: Using ep0 maxpacket: 32 [ 242.045594][ T9418] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.095063][ T9418] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 242.135148][ T9418] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.173100][ T9418] usb 2-1: Product: syz [ 242.185613][ T9449] xt_nfacct: accounting object `syz0' does not exists [ 242.205664][ T9418] usb 2-1: Manufacturer: syz [ 242.213110][ T9418] usb 2-1: SerialNumber: syz [ 242.235806][ T9418] usb 2-1: config 0 descriptor?? [ 242.265621][ T9418] cdc_ether 2-1:0.0: skipping garbage [ 242.281830][ T9418] usb 2-1: bad CDC descriptors [ 242.297161][ T9418] usb 2-1: unsupported MDLM descriptors [ 242.432013][ T9457] loop2: detected capacity change from 0 to 256 [ 242.560329][ T4298] usb 2-1: USB disconnect, device number 12 [ 242.779261][ T9463] loop3: detected capacity change from 0 to 256 [ 242.891011][ T9450] loop0: detected capacity change from 0 to 32768 [ 242.935054][ T9450] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.2287 (9450) [ 243.009639][ T9450] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 243.026694][ T9450] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 243.036007][ T9450] BTRFS info (device loop0): force zlib compression, level 3 [ 243.085571][ T9450] BTRFS info (device loop0): force clearing of disk cache [ 243.138332][ T9450] BTRFS info (device loop0): setting nodatasum [ 243.157694][ T9450] BTRFS info (device loop0): use zlib compression, level 3 [ 243.165008][ T9450] BTRFS info (device loop0): allowing degraded mounts [ 243.236679][ T9450] BTRFS info (device loop0): enabling disk space caching [ 243.243788][ T9450] BTRFS info (device loop0): disk space caching is enabled [ 243.303938][ T9480] device ip6gretap1 entered promiscuous mode [ 243.596698][ T9450] BTRFS info (device loop0): enabling ssd optimizations [ 243.604678][ T9450] BTRFS info (device loop0): rebuilding free space tree [ 243.726872][ T9450] BTRFS info (device loop0): disabling free space tree [ 243.733849][ T9450] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 243.796672][ T9450] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 244.114349][ T4249] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 244.355555][ T9532] netlink: 'syz.1.2324': attribute type 2 has an invalid length. [ 244.776995][ T9540] kAFS: unable to lookup cell '.,' [ 245.049672][ T9550] device bridge1 entered promiscuous mode [ 245.243262][ T9549] loop0: detected capacity change from 0 to 4096 [ 245.316737][ T9526] loop3: detected capacity change from 0 to 32768 [ 245.351760][ T9526] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.2320 (9526) [ 245.399658][ T9526] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 245.478567][ T9526] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 245.523686][ T9526] BTRFS info (device loop3): force zlib compression, level 3 [ 245.567608][ T9526] BTRFS info (device loop3): force clearing of disk cache [ 245.574854][ T9526] BTRFS info (device loop3): setting nodatasum [ 245.633591][ T9526] BTRFS info (device loop3): use zlib compression, level 3 [ 245.651915][ T9526] BTRFS info (device loop3): allowing degraded mounts [ 245.716182][ T9526] BTRFS info (device loop3): enabling disk space caching [ 245.757512][ T9526] BTRFS info (device loop3): disk space caching is enabled [ 245.773833][ T9565] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2339'. [ 245.981816][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 245.981832][ T27] audit: type=1326 audit(1745576922.841:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509838e969 code=0x7ffc0000 [ 246.010268][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.016726][ T27] audit: type=1326 audit(1745576922.851:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509838e969 code=0x7ffc0000 [ 246.039790][ T27] audit: type=1326 audit(1745576922.881:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f509838e969 code=0x7ffc0000 [ 246.062100][ T27] audit: type=1326 audit(2000000000.000:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509838e969 code=0x7ffc0000 [ 246.100479][ T27] audit: type=1326 audit(2000000000.000:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.4.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509838e969 code=0x7ffc0000 [ 246.123672][ T9526] BTRFS info (device loop3): enabling ssd optimizations [ 246.140046][ T9589] printk: syz.0.2342 (9589): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 246.184417][ T9526] BTRFS info (device loop3): rebuilding free space tree [ 246.232753][ T9526] BTRFS info (device loop3): disabling free space tree [ 246.246174][ T9552] loop2: detected capacity change from 0 to 32768 [ 246.254588][ T9526] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 246.297281][ T9552] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.2332 (9552) [ 246.333458][ T9526] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 246.344191][ T4329] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4329) [ 246.606041][ T9526] BTRFS info (device loop3): balance: start -f -sdrange=11..18446744073709551610,vrange=5..16,stripes=1831..0 [ 246.646866][ T9526] BTRFS info (device loop3): balance: ended with status: 0 [ 246.709014][ T9603] loop4: detected capacity change from 0 to 64 [ 246.851479][ T4250] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 247.108437][ T9612] loop4: detected capacity change from 0 to 256 [ 247.372616][ T9619] IPv6: NLM_F_REPLACE set, but no existing node found! [ 247.384174][ T9615] loop0: detected capacity change from 0 to 4096 [ 247.464755][ T9615] EXT4-fs: Ignoring removed orlov option [ 247.477380][ T9615] EXT4-fs: Ignoring removed nobh option [ 247.606741][ T9615] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 247.720533][ T9615] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 247.752552][ T9615] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 247.804904][ T9615] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.2356: Failed to acquire dquot type 1 [ 248.022915][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 248.166140][ T9640] loop1: detected capacity change from 0 to 4096 [ 248.207884][ T9640] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 248.283330][ T9640] ntfs3: loop1: Failed to load $Extend. [ 248.358784][ T9640] ntfs3: loop1: ino=5, "/" directory corrupted [ 248.404123][ T9654] loop3: detected capacity change from 0 to 1024 [ 248.465948][ T9656] loop2: detected capacity change from 0 to 64 [ 248.622498][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2376'. [ 248.889811][ T9669] loop2: detected capacity change from 0 to 128 [ 248.902669][ T9669] FAT-fs (loop2): bogus number of reserved sectors [ 248.913820][ T9669] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 248.941770][ T9669] FAT-fs (loop2): Can't find a valid FAT filesystem [ 249.049069][ T4487] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 249.069624][ T9669] loop2: detected capacity change from 0 to 128 [ 249.086838][ T22] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 249.142356][ T4487] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 249.298654][ T22] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 249.344144][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.365662][ T22] usb 4-1: config 0 has no interface number 0 [ 249.376711][ T22] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 249.406803][ T22] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 249.426891][ T22] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.450280][ T22] usb 4-1: config 0 interface 52 has no altsetting 0 [ 249.486419][ T22] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 249.546856][ T22] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 249.575940][ T22] usb 4-1: Manufacturer: syz [ 249.598262][ T22] usb 4-1: config 0 descriptor?? [ 249.707931][ T9696] loop4: detected capacity change from 0 to 1024 [ 249.796038][ T9696] syz.4.2394: attempt to access beyond end of device [ 249.796038][ T9696] loop4: rw=0, sector=393338, nr_sectors = 2 limit=1024 [ 249.812524][ T22] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 249.842008][ T22] synaptics_usb: probe of 4-1:0.52 failed with error -5 [ 250.031021][ T22] usb 4-1: USB disconnect, device number 12 [ 250.452824][ T9692] loop1: detected capacity change from 0 to 32768 [ 250.536178][ T9692] read_mapping_page failed! [ 250.793945][ T9718] loop2: detected capacity change from 0 to 256 [ 250.826183][ T9718] exfat: Deprecated parameter 'namecase' [ 250.895163][ T9718] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 250.931192][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2409'. [ 251.136783][ T9726] netlink: 'syz.0.2410': attribute type 5 has an invalid length. [ 251.201694][ T9732] loop3: detected capacity change from 0 to 16 [ 251.244709][ T9732] erofs: (device loop3): mounted with root inode @ nid 36. [ 251.325706][ T9732] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 251.394987][ T9732] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 251.395809][ T9737] netlink: 'syz.2.2414': attribute type 1 has an invalid length. [ 251.486828][ T9732] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 251.786178][ T9748] loop0: detected capacity change from 0 to 512 [ 251.813126][ T9748] EXT4-fs: Ignoring removed orlov option [ 251.838038][ T9748] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 251.894114][ T9754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.920134][ T9748] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.2420: casefold flag without casefold feature [ 251.935540][ T9748] EXT4-fs (loop0): Remounting filesystem read-only [ 251.953844][ T9753] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 251.953892][ T9748] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2420: couldn't read orphan inode 15 (err -117) [ 251.975404][ T9748] EXT4-fs (loop0): Remounting filesystem read-only [ 251.982689][ T9748] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 251.993921][ T9753] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 252.277807][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 252.419671][ T9764] loop2: detected capacity change from 0 to 4096 [ 252.458203][ T9764] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 252.491787][ T9768] loop3: detected capacity change from 0 to 2048 [ 252.571940][ T9764] ntfs3: loop2: Failed to load $Extend. [ 252.582079][ T9768] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 252.706785][ T9764] ntfs3: loop2: ino=5, "/" directory corrupted [ 252.729812][ T9782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2434'. [ 252.784734][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 253.316374][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2441'. [ 253.356521][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2441'. [ 253.606217][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2443'. [ 253.712748][ T9780] loop1: detected capacity change from 0 to 32768 [ 253.824743][ T9780] XFS (loop1): Mounting V5 Filesystem [ 253.841736][ T9815] loop4: detected capacity change from 0 to 128 [ 253.900662][ T9797] loop2: detected capacity change from 0 to 32768 [ 253.904629][ T9815] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 253.918977][ T9797] (syz.2.2440,9797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 253.939097][ T9797] (syz.2.2440,9797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 253.987882][ T9815] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 254.020531][ T9797] JBD2: Ignoring recovery information on journal [ 254.065574][ T9780] XFS (loop1): Ending clean mount [ 254.071047][ T9815] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 254.127647][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 254.152443][ T9797] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 254.329463][ T4248] XFS (loop1): Unmounting Filesystem [ 254.501672][ T9837] loop0: detected capacity change from 0 to 64 [ 254.511904][ T4262] ocfs2: Unmounting device (7,2) on (node local) [ 254.716194][ T9841] loop4: detected capacity change from 0 to 2048 [ 254.742256][ T9841] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.434852][ T9860] xt_nfacct: accounting object `syz1' does not exists [ 255.478791][ T9857] loop0: detected capacity change from 0 to 4096 [ 255.515779][ T9857] ntfs3: loop0: ino=3, Correct links count -> 2. [ 255.599285][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.605670][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.658935][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2467'. [ 255.664821][ T9857] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 255.730457][ T9843] loop3: detected capacity change from 0 to 32768 [ 255.808291][ T9843] JBD2: Ignoring recovery information on journal [ 255.909626][ T9843] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 256.159606][ T4250] ocfs2: Unmounting device (7,3) on (node local) [ 257.428366][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2498'. [ 257.552278][ T52] block nbd1: Attempted send on invalid socket [ 257.559860][ T52] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.570080][ T9930] vxfs: unable to read disk superblock at 1 [ 257.577845][ T52] block nbd1: Attempted send on invalid socket [ 257.584444][ T52] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.594324][ T9930] vxfs: unable to read disk superblock at 8 [ 257.600551][ T9930] vxfs: can't find superblock. [ 257.712349][ T9940] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2503'. [ 258.320653][ T9962] loop2: detected capacity change from 0 to 512 [ 258.448996][ T9962] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 258.489918][ T9972] loop4: detected capacity change from 0 to 16 [ 258.566396][ T9972] erofs: (device loop4): mounted with root inode @ nid 36. [ 258.617952][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 259.295037][ T9996] kAFS: unable to lookup cell '/' [ 259.365936][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2532'. [ 259.705765][T10012] loop0: detected capacity change from 0 to 16 [ 259.747185][T10012] erofs: (device loop0): mounted with root inode @ nid 36. [ 260.087471][T10026] loop0: detected capacity change from 0 to 128 [ 260.138101][T10024] loop3: detected capacity change from 0 to 2048 [ 260.194404][T10022] loop4: detected capacity change from 0 to 4096 [ 260.235105][T10024] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 260.276842][T10022] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 260.331615][T10024] EXT4-fs error (device loop3): ext4_xattr_block_list:719: inode #15: comm syz.3.2544: corrupted xattr block 128 [ 260.571438][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 261.329612][T10060] loop2: detected capacity change from 0 to 4096 [ 261.370226][T10060] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 261.389825][T10065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2561'. [ 261.856683][ T22] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 262.066696][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 262.095683][T10091] netlink: 'syz.2.2575': attribute type 30 has an invalid length. [ 262.105773][ T22] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 262.141816][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.161681][ T22] usb 4-1: Product: syz [ 262.168025][ T22] usb 4-1: Manufacturer: syz [ 262.172676][ T22] usb 4-1: SerialNumber: syz [ 262.218056][ T22] usb 4-1: config 0 descriptor?? [ 262.432136][ T22] usb 4-1: ignoring: not an USB2CAN converter [ 262.518144][T10099] loop2: detected capacity change from 0 to 4096 [ 262.555812][T10099] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 262.648073][ T22] usb 4-1: USB disconnect, device number 13 [ 262.840249][T10113] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 263.952464][T10109] loop4: detected capacity change from 0 to 40427 [ 263.999729][T10109] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 264.033705][T10109] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 264.083124][T10109] F2FS-fs (loop4): Found nat_bits in checkpoint [ 264.301348][T10109] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 264.327378][T10109] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 264.366218][T10109] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 264.565375][T10151] loop1: detected capacity change from 0 to 4096 [ 265.487225][T10189] netlink: 'syz.1.2610': attribute type 1 has an invalid length. [ 265.566684][T10189] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2610'. [ 265.658800][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'. [ 265.676821][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'. [ 265.834174][T10195] loop4: detected capacity change from 0 to 4096 [ 265.901150][T10195] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 266.096808][T10209] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.259488][T10215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2622'. [ 267.031168][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2629'. [ 267.205824][T10245] delete_channel: no stack [ 267.536034][T10213] loop3: detected capacity change from 0 to 32768 [ 267.597082][T10213] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2621 (10213) [ 267.670283][T10254] loop0: detected capacity change from 0 to 128 [ 267.776795][T10213] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 267.804457][T10254] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 267.844816][T10213] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 267.900594][T10213] BTRFS info (device loop3): using free space tree [ 268.006886][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 268.421062][T10213] BTRFS info (device loop3): enabling ssd optimizations [ 268.431575][T10296] netlink: 'syz.2.2646': attribute type 10 has an invalid length. [ 268.446410][T10296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2646'. [ 268.470280][T10296] device dummy0 entered promiscuous mode [ 268.503614][T10296] bridge0: port 4(dummy0) entered blocking state [ 268.530834][T10296] bridge0: port 4(dummy0) entered disabled state [ 268.575469][T10296] bridge0: port 4(dummy0) entered blocking state [ 268.582111][T10296] bridge0: port 4(dummy0) entered forwarding state [ 268.647031][ T4250] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.658490][T10299] netlink: 'syz.1.2650': attribute type 14 has an invalid length. [ 268.706148][T10299] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (204) [ 268.794099][T10302] loop0: detected capacity change from 0 to 2048 [ 268.881192][T10302] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.2651: bad orphan inode 8192 [ 268.911330][T10302] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 269.079590][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 269.200988][T10314] netlink: 'syz.4.2657': attribute type 10 has an invalid length. [ 269.237950][T10314] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2657'. [ 269.252352][T10316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2658'. [ 269.306010][T10316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2658'. [ 269.306781][T10314] netlink: 'syz.4.2657': attribute type 10 has an invalid length. [ 269.327134][T10310] loop1: detected capacity change from 0 to 4096 [ 269.352618][T10314] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2657'. [ 269.452305][T10310] ntfs3: loop1: Failed to load $Extend. [ 269.762220][T10328] tmpfs: Bad value for 'mpol' [ 269.783215][T10330] loop2: detected capacity change from 0 to 128 [ 269.900684][T10330] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 270.088625][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 270.461796][T10356] loop4: detected capacity change from 0 to 2048 [ 270.539567][T10356] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.732707][T10366] xt_cgroup: invalid path, errno=-2 [ 270.734204][T10368] netlink: 'syz.2.2683': attribute type 1 has an invalid length. [ 270.748721][T10368] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2683'. [ 270.771467][T10370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2682'. [ 271.170726][T10379] loop2: detected capacity change from 0 to 4096 [ 271.196451][T10379] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 271.235384][T10379] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 271.259911][T10379] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 271.306003][T10379] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 271.326678][T10379] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 271.345504][T10379] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 271.392308][T10379] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 271.422395][T10379] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 271.452242][T10379] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 271.466654][T10390] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 271.484685][T10379] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00 [ 271.904853][T10376] loop3: detected capacity change from 0 to 32768 [ 272.003234][T10376] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 272.003234][T10376] [ 272.053926][T10376] ERROR: (device loop3): remounting filesystem as read-only [ 272.102150][T10376] ERROR: (device loop3): jfs_rename: [ 272.102150][T10376] [ 272.235258][ T4250] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 272.235258][ T4250] [ 272.799740][T10424] loop1: detected capacity change from 0 to 8192 [ 272.833401][T10424] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 272.860532][T10424] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 272.875420][T10424] REISERFS (device loop1): using ordered data mode [ 272.882553][T10424] reiserfs: using flush barriers [ 272.900257][T10424] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 272.917074][T10424] REISERFS (device loop1): checking transaction log (loop1) [ 272.987278][T10424] REISERFS (device loop1): Using r5 hash to sort names [ 272.994545][T10424] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 273.046724][T10424] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 273.093293][T10424] REISERFS warning (device loop1): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=875837489, len=8 - odd [ 273.516481][T10457] netlink: 'syz.4.2725': attribute type 5 has an invalid length. [ 273.543873][T10457] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2725'. [ 273.734060][T10465] loop0: detected capacity change from 0 to 2048 [ 273.774647][T10465] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.806811][T10467] binder: 10466:10467 ioctl c0306201 2000000001c0 returned -14 [ 273.860394][T10465] Invalid option length (0) for dns_resolver key [ 274.201603][ T27] audit: type=1400 audit(274.174:75): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=10482 comm="syz.3.2737" [ 274.315941][T10489] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2740'. [ 274.346267][T10487] loop1: detected capacity change from 0 to 1764 [ 274.356675][ T4239] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 274.421499][T10487] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 274.546675][ T4239] usb 3-1: Using ep0 maxpacket: 32 [ 274.553771][ T4239] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 274.590659][ T4239] usb 3-1: config 0 has no interface number 0 [ 274.620677][ T4239] usb 3-1: config 0 interface 29 has no altsetting 0 [ 274.653197][ T4239] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 274.693724][ T4239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.706706][ T4239] usb 3-1: Product: syz [ 274.710967][ T4239] usb 3-1: Manufacturer: syz [ 274.723323][ T4239] usb 3-1: SerialNumber: syz [ 274.757701][ T4239] usb 3-1: config 0 descriptor?? [ 274.770969][T10503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.825695][T10498] loop3: detected capacity change from 0 to 4096 [ 274.979915][ T4239] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 275.131647][ T4250] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 275.164241][ T4250] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 275.196939][ T4239] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 275.215628][ T4239] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 275.317641][ T4239] peak_usb: probe of 3-1:0.29 failed with error -71 [ 275.372895][ T4239] usb 3-1: USB disconnect, device number 10 [ 275.503965][T10523] loop1: detected capacity change from 0 to 128 [ 275.550576][T10523] affs: No valid root block on device loop1 [ 275.622688][ T4329] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 275.665757][T10523] loop1: detected capacity change from 0 to 256 [ 275.666844][ T4329] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.687500][T10523] UDF-fs: bad mount option "root=00000000000000000167" or missing value [ 275.748747][ T4329] Buffer I/O error on dev loop1, logical block 0, async page read [ 276.371206][T10555] loop2: detected capacity change from 0 to 256 [ 276.413877][T10555] exfat: Deprecated parameter 'namecase' [ 276.455347][T10555] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 277.386720][T10592] netlink: 'syz.0.2789': attribute type 14 has an invalid length. [ 277.846029][T10611] loop3: detected capacity change from 0 to 8 [ 277.860074][T10611] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 277.868543][T10609] device vlan0 entered promiscuous mode [ 277.886018][T10611] cramfs: Error -3 while decompressing! [ 277.895230][T10611] cramfs: ffffffff96b4f568(26)->ffff8880512ab000(4096) [ 277.906156][T10611] cramfs: Error -3 while decompressing! [ 277.938358][T10611] cramfs: ffffffff96b4f582(26)->ffff888048085000(4096) [ 277.971544][T10611] cramfs: Error -3 while decompressing! [ 277.981116][T10611] cramfs: ffffffff96b4f59c(16)->ffff888049656000(4096) [ 277.996919][T10611] cramfs: Error -3 while decompressing! [ 278.014655][T10611] cramfs: ffffffff96b4f568(26)->ffff8880512ab000(4096) [ 278.180095][T10588] loop1: detected capacity change from 0 to 32768 [ 278.216860][T10588] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2788 (10588) [ 278.298874][T10588] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 278.359818][T10588] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 278.391528][T10626] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 10626 comm: syz.2.2806) [ 278.406811][T10588] BTRFS info (device loop1): force zlib compression, level 3 [ 278.431731][T10588] BTRFS info (device loop1): force clearing of disk cache [ 278.446781][T10588] BTRFS info (device loop1): setting nodatasum [ 278.473437][T10588] BTRFS info (device loop1): doing ref verification [ 278.505026][T10588] BTRFS info (device loop1): allowing degraded mounts [ 278.523533][T10588] BTRFS info (device loop1): using free space tree [ 278.663389][T10636] loop4: detected capacity change from 0 to 256 [ 278.748505][T10636] FAT-fs (loop4): Directory bread(block 64) failed [ 278.787381][T10654] mmap: syz.0.2812 (10654): VmData 37457920 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 278.816264][T10636] FAT-fs (loop4): Directory bread(block 65) failed [ 278.827178][T10636] FAT-fs (loop4): Directory bread(block 66) failed [ 278.833809][T10636] FAT-fs (loop4): Directory bread(block 67) failed [ 278.857318][T10588] BTRFS info (device loop1): enabling ssd optimizations [ 278.875306][T10588] BTRFS info (device loop1): rebuilding free space tree [ 278.885399][T10636] FAT-fs (loop4): Directory bread(block 68) failed [ 278.912215][T10636] FAT-fs (loop4): Directory bread(block 69) failed [ 278.938362][T10636] FAT-fs (loop4): Directory bread(block 70) failed [ 278.968565][T10636] FAT-fs (loop4): Directory bread(block 71) failed [ 278.975298][T10636] FAT-fs (loop4): Directory bread(block 72) failed [ 279.009830][ T4239] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 279.016979][T10636] FAT-fs (loop4): Directory bread(block 73) failed [ 279.131630][ T4248] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 279.208848][ T4239] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.245530][ T4239] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 279.281513][ T4239] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.331560][ T4239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.378402][T10646] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 279.837238][T10679] SET target dimension over the limit! [ 279.863353][ T7] usb 3-1: USB disconnect, device number 11 [ 279.994964][T10685] loop3: detected capacity change from 0 to 256 [ 280.047579][T10685] exfat: Deprecated parameter 'namecase' [ 280.130053][T10685] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 280.401910][T10698] loop4: detected capacity change from 0 to 256 [ 280.500480][T10702] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2833'. [ 280.766621][ T5804] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 280.821001][T10714] loop4: detected capacity change from 0 to 128 [ 280.831304][T10713] loop0: detected capacity change from 0 to 256 [ 280.856387][T10713] exfat: Deprecated parameter 'utf8' [ 280.880467][T10714] affs: No valid root block on device loop4 [ 280.891321][T10713] exfat: Deprecated parameter 'namecase' [ 280.925667][T10713] exfat: Deprecated parameter 'namecase' [ 280.933035][T10714] loop4: detected capacity change from 0 to 256 [ 280.942751][T10713] exfat: Deprecated parameter 'utf8' [ 280.957371][T10714] UDF-fs: bad mount option "root=00000000000000000167" or missing value [ 280.966793][ T5804] usb 4-1: Using ep0 maxpacket: 16 [ 280.979509][ T5804] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 281.000480][T10713] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 281.031843][ T5804] usb 4-1: config 0 has no interface number 0 [ 281.066775][ T5804] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 281.090853][ T5804] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 281.131733][ T5804] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 281.180506][ T5804] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 281.211856][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.223835][ T5804] usb 4-1: Product: syz [ 281.232891][ T5804] usb 4-1: Manufacturer: syz [ 281.251243][ T5804] usb 4-1: SerialNumber: syz [ 281.280371][ T5804] usb 4-1: config 0 descriptor?? [ 281.304610][T10700] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.359875][T10722] device netdevsim0 entered promiscuous mode [ 281.396990][T10722] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 281.434297][T10724] tipc: Trying to set illegal importance in message [ 281.544190][ T5804] usb 4-1: USB disconnect, device number 14 [ 281.705432][T10708] loop1: detected capacity change from 0 to 32768 [ 281.760226][T10708] [ 281.760226][T10708] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.760226][T10708] [ 281.863909][T10736] netlink: 'syz.0.2849': attribute type 30 has an invalid length. [ 281.885703][ T33] [ 281.885703][ T33] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.885703][ T33] [ 281.917629][ T33] [ 281.917629][ T33] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.917629][ T33] [ 281.933333][T10732] loop4: detected capacity change from 0 to 8192 [ 281.950265][ T4248] [ 281.950265][ T4248] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.950265][ T4248] [ 281.977686][ T107] [ 281.977686][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.977686][ T107] [ 281.992759][ T4248] [ 281.992759][ T4248] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.992759][ T4248] [ 281.992763][T10732] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 281.992787][T10732] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 282.056776][ T107] ================================================================== [ 282.064895][ T107] BUG: KASAN: use-after-free in txEnd+0x329/0x520 [ 282.071347][ T107] Write of size 8 at addr ffff88807c83b840 by task jfsCommit/107 [ 282.079085][ T107] [ 282.081513][ T107] CPU: 0 PID: 107 Comm: jfsCommit Not tainted 6.1.135-syzkaller #0 [ 282.089428][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 282.099508][ T107] Call Trace: [ 282.102804][ T107] [ 282.105752][ T107] dump_stack_lvl+0x168/0x22e [ 282.110467][ T107] ? __lock_acquire+0x7c50/0x7c50 [ 282.115570][ T107] ? show_regs_print_info+0x12/0x12 [ 282.119007][T10732] REISERFS (device loop4): using ordered data mode [ 282.120786][ T107] ? load_image+0x3b0/0x3b0 [ 282.128197][T10732] reiserfs: using flush barriers [ 282.131772][ T107] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 282.140005][T10732] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 282.142056][ T107] ? __virt_addr_valid+0x188/0x540 [ 282.142090][ T107] ? __virt_addr_valid+0x465/0x540 [ 282.164512][T10732] REISERFS (device loop4): checking transaction log (loop4) [ 282.168331][ T107] ? txEnd+0x329/0x520 [ 282.168359][ T107] print_report+0xa8/0x220 [ 282.168381][ T107] kasan_report+0x10b/0x140 [ 282.168413][ T107] ? txEnd+0x329/0x520 [ 282.168437][ T107] kasan_check_range+0x27b/0x290 [ 282.168468][ T107] txEnd+0x329/0x520 [ 282.168493][ T107] jfs_lazycommit+0x5a2/0xa50 [ 282.168522][ T107] ? txFreelock+0x5a0/0x5a0 [ 282.168545][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 282.168573][ T107] ? do_task_dead+0xd0/0xd0 [ 282.168598][ T107] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 282.168626][ T107] ? __kthread_parkme+0x162/0x1c0 [ 282.168655][ T107] kthread+0x29d/0x330 [ 282.168681][ T107] ? txFreelock+0x5a0/0x5a0 [ 282.168702][ T107] ? kthread_blkcg+0xd0/0xd0 [ 282.168730][ T107] ret_from_fork+0x1f/0x30 [ 282.168763][ T107] [ 282.168770][ T107] [ 282.168773][ T107] Allocated by task 10708: [ 282.168792][ T107] kasan_set_track+0x4b/0x70 [ 282.168817][ T107] __kasan_kmalloc+0x8e/0xa0 [ 282.168843][ T107] lmLogOpen+0x2c0/0xf90 [ 282.168863][ T107] jfs_mount_rw+0xf2/0x5c0 [ 282.168889][ T107] jfs_fill_super+0x58e/0xac0 [ 282.282337][ T107] mount_bdev+0x287/0x3c0 [ 282.286697][ T107] legacy_get_tree+0xe6/0x180 [ 282.291396][ T107] vfs_get_tree+0x88/0x270 [ 282.295835][ T107] do_new_mount+0x24a/0xa40 [ 282.300359][ T107] __se_sys_mount+0x2d6/0x3c0 [ 282.305057][ T107] do_syscall_64+0x4c/0xa0 [ 282.309504][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.315430][ T107] [ 282.317768][ T107] Freed by task 4248: [ 282.321758][ T107] kasan_set_track+0x4b/0x70 [ 282.326384][ T107] kasan_save_free_info+0x2d/0x50 [ 282.331433][ T107] ____kasan_slab_free+0x126/0x1e0 [ 282.336575][ T107] slab_free_freelist_hook+0x131/0x1a0 [ 282.342066][ T107] __kmem_cache_free+0xb6/0x1f0 [ 282.346943][ T107] lmLogClose+0x293/0x520 [ 282.351306][ T107] jfs_umount+0x28f/0x360 [ 282.355666][ T107] jfs_put_super+0x88/0x190 [ 282.360199][ T107] generic_shutdown_super+0x130/0x340 [ 282.365596][ T107] kill_block_super+0x7c/0xe0 [ 282.370303][ T107] deactivate_locked_super+0x93/0xf0 [ 282.375615][ T107] cleanup_mnt+0x463/0x4f0 [ 282.380057][ T107] task_work_run+0x1ca/0x250 [ 282.384673][ T107] exit_to_user_mode_loop+0xe6/0x110 [ 282.389997][ T107] exit_to_user_mode_prepare+0xb1/0x140 [ 282.395577][ T107] syscall_exit_to_user_mode+0x16/0x40 [ 282.401078][ T107] do_syscall_64+0x58/0xa0 [ 282.405526][ T107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.411464][ T107] [ 282.413804][ T107] The buggy address belongs to the object at ffff88807c83b800 [ 282.413804][ T107] which belongs to the cache kmalloc-1k of size 1024 [ 282.427883][ T107] The buggy address is located 64 bytes inside of [ 282.427883][ T107] 1024-byte region [ffff88807c83b800, ffff88807c83bc00) [ 282.441197][ T107] [ 282.443538][ T107] The buggy address belongs to the physical page: [ 282.449978][ T107] page:ffffea0001f20e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c838 [ 282.460154][ T107] head:ffffea0001f20e00 order:3 compound_mapcount:0 compound_pincount:0 [ 282.468500][ T107] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 282.476526][ T107] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441dc0 [ 282.485145][ T107] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 282.493748][ T107] page dumped because: kasan: bad access detected [ 282.500232][ T107] page_owner tracks the page as allocated [ 282.505967][ T107] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4250, tgid 4250 (syz-executor), ts 74564639521, free_ts 74533055588 [ 282.526759][ T107] post_alloc_hook+0x173/0x1a0 [ 282.531565][ T107] get_page_from_freelist+0x1a26/0x1ac0 [ 282.537155][ T107] __alloc_pages+0x1df/0x4e0 [ 282.541802][ T107] alloc_slab_page+0x5d/0x160 [ 282.546511][ T107] new_slab+0x87/0x2c0 [ 282.550620][ T107] ___slab_alloc+0xbc6/0x1220 [ 282.555326][ T107] __kmem_cache_alloc_node+0x1a0/0x260 [ 282.560814][ T107] __kmalloc_node_track_caller+0x9e/0x230 [ 282.566560][ T107] __alloc_skb+0x22a/0x7e0 [ 282.571013][ T107] inet6_rt_notify+0xb0/0x240 [ 282.575728][ T107] fib6_add+0x1d88/0x3cc0 [ 282.580080][ T107] ip6_route_add+0x86/0x130 [ 282.584611][ T107] addrconf_add_linklocal+0x458/0x6b0 [ 282.590010][ T107] addrconf_addr_gen+0x4f1/0x600 [ 282.594975][ T107] addrconf_init_auto_addrs+0x78e/0xb30 [ 282.600557][ T107] addrconf_notify+0xaca/0xf40 [ 282.605347][ T107] page last free stack trace: [ 282.610039][ T107] free_unref_page_prepare+0x8b4/0x9a0 [ 282.615531][ T107] free_unref_page+0x2e/0x3f0 [ 282.620241][ T107] qlist_free_all+0x76/0xe0 [ 282.624771][ T107] kasan_quarantine_reduce+0x144/0x160 [ 282.630259][ T107] __kasan_slab_alloc+0x1e/0x80 [ 282.635141][ T107] slab_post_alloc_hook+0x4b/0x480 [ 282.640283][ T107] __kmem_cache_alloc_node+0x140/0x260 [ 282.645770][ T107] kmalloc_trace+0x26/0xe0 [ 282.650214][ T107] ipv6_add_addr+0x406/0xf90 [ 282.654840][ T107] add_addr+0x8c/0x2c0 [ 282.658937][ T107] add_v4_addrs+0x740/0xc60 [ 282.663484][ T107] addrconf_init_auto_addrs+0x387/0xb30 [ 282.669056][ T107] addrconf_notify+0xaca/0xf40 [ 282.673843][ T107] raw_notifier_call_chain+0xcb/0x160 [ 282.679235][ T107] __dev_notify_flags+0x178/0x2d0 [ 282.684286][ T107] dev_change_flags+0xe3/0x1a0 [ 282.689077][ T107] [ 282.691413][ T107] Memory state around the buggy address: [ 282.697070][ T107] ffff88807c83b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 282.705153][ T107] ffff88807c83b780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 282.712524][T10732] REISERFS (device loop4): Using tea hash to sort names [ 282.713218][ T107] >ffff88807c83b800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.713231][ T107] ^ [ 282.713244][ T107] ffff88807c83b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.713257][ T107] ffff88807c83b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.733699][T10732] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 282.734373][ T107] ================================================================== [ 282.760018][ T107] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 282.760035][ T107] CPU: 0 PID: 107 Comm: jfsCommit Not tainted 6.1.135-syzkaller #0 [ 282.760060][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 282.760073][ T107] Call Trace: [ 282.760081][ T107] [ 282.760089][ T107] dump_stack_lvl+0x168/0x22e [ 282.760123][ T107] ? memcpy+0x3c/0x60 [ 282.760146][ T107] ? show_regs_print_info+0x12/0x12 [ 282.760174][ T107] ? load_image+0x3b0/0x3b0 [ 282.760202][ T107] panic+0x2c9/0x710 [ 282.760232][ T107] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 282.760270][ T107] ? bpf_jit_dump+0xd0/0xd0 [ 282.760305][ T107] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 282.760334][ T107] ? _raw_spin_unlock+0x40/0x40 [ 282.760364][ T107] check_panic_on_warn+0x80/0xa0 [ 282.760388][ T107] ? txEnd+0x329/0x520 [ 282.760412][ T107] end_report+0x66/0x110 [ 282.760443][ T107] kasan_report+0x118/0x140 [ 282.760476][ T107] ? txEnd+0x329/0x520 [ 282.760504][ T107] kasan_check_range+0x27b/0x290 [ 282.760537][ T107] txEnd+0x329/0x520 [ 282.760564][ T107] jfs_lazycommit+0x5a2/0xa50 [ 282.760593][ T107] ? txFreelock+0x5a0/0x5a0 [ 282.760617][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 282.760648][ T107] ? do_task_dead+0xd0/0xd0 [ 282.760676][ T107] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 282.760707][ T107] ? __kthread_parkme+0x162/0x1c0 [ 282.760739][ T107] kthread+0x29d/0x330 [ 282.760768][ T107] ? txFreelock+0x5a0/0x5a0 [ 282.760793][ T107] ? kthread_blkcg+0xd0/0xd0 [ 282.760824][ T107] ret_from_fork+0x1f/0x30 [ 282.760860][ T107] [ 282.768223][ T107] Kernel Offset: disabled [ 282.928608][ T107] Rebooting in 86400 seconds..