last executing test programs: 8m31.174604555s ago: executing program 1 (id=5212): syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYBLOB="88e2e648f70ad5763a343daf39cab3defb775f0676e8010000000000000015dc40799b832d5db4fea2b9894d580000000012e959ef6d35f305144c1452069473802c4df7db59920ba4dd1e8c77bf67c36b2e4e5eee8dc00f81923ca96c9f6d3abda7166fbcead960aee4f4a132d01f373ebd52d7e5610ff6e55180d1dd609fabc9a27c57623b2c11427b1c9e5845b18375004721e60307c9", @ANYRES8=0x0, @ANYBLOB="46403d5b0cd8d68d426a04b4787195ff7424a82544a22122bc0b10c80fba4c6d01267249f7c3a8ab208fa40142d5c00129ab0566d8b7a6e002744040a9323940df302191d4504c3caa6c07685f08ddb695d817be317e3fd0452ce21ae9730000000000", @ANYBLOB="cd099bf46634ae0ef20ed2ba2228c7861d77eb8e89debf07a0ac26cdadf7a684dc0ee6f5048a6a3e2e299d207a30c3fe1e73696eaac25bca2d9a44025207a0e36ed20b09f1d1d8752bbb15faa46ca426761546b6172b48665c3907", @ANYRESHEX, @ANYBLOB="565ce6f5189acfa3316f89263710cde4cf935dd8aefd7044f7dcd5a74eea89"], 0x6, 0x18f, &(0x7f0000000840)="$eJzsVb1OKkEU/mYZdrk3t6CmveTCLZTdRYlvIJWVDyCBFYmLPyyJQkhcKx6FxKew8B0sTGywoNACSxMzZn5YZmsSgma+BL7vnDk/c6Y4exJdRg6Az/moiTwECP7giRBQACUifQeO5Hdbck3ZMyrZU/47xS+Ko8HwtBGGQU8IeyHCFQRTrRPPyhU3X7CbtTftbcrsRvwcwRjFGpsuzf1bC29ilz3OR00ujgAwxhj3teSP6DEZAA9aTIECBeRIBiyJoWJbAiUAlX73ohINhludbqMdtIMz36/W3B3X3fUrx50wcOU/0VpYcpGB838AfLH90s6zAJ7Vgv2NNIh2NXVO9Fy+f2exDCj/TedaWq5eQ9a9T2qoRQv+FIf4hxyAq5ho3qKoRiFGq4MgowyPaveUPXPiYLt5HrbGICCLtAloUsObIpsYvm5U9+LFFceKi4rriieKp4odkv4mUVHhVVnleDm0bQHXjX6/5wG2VD4Pkyof6w/Hu37Y6eGKDgwMDAwMDAwMvgm+AgAA//+a42GE") llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 8m30.832521695s ago: executing program 1 (id=5218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x20}}) 8m30.647571756s ago: executing program 1 (id=5220): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x48, 0x101, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0xffffffff}]}, 0x38}}, 0x0) 8m30.538714232s ago: executing program 1 (id=5223): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8m30.022224663s ago: executing program 1 (id=5231): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000000}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8m29.572364259s ago: executing program 1 (id=5239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x4) 8m29.06033265s ago: executing program 32 (id=5239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x4) 5m11.080009059s ago: executing program 4 (id=8055): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x4000, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 5m10.738310909s ago: executing program 4 (id=8059): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 5m10.392088279s ago: executing program 4 (id=8061): syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x204440, &(0x7f0000000d80)=ANY=[], 0x23, 0x7e2, &(0x7f0000001000)="$eJzs3U9oHOfZAPBnFMl/FPAX8n3kM8ZxxnY+Ppu6yq6UKBU5JJvVSJ5E2hW7q2JTShJiG4zlJMSEND408SVpS0vpqcc015BLoYdCD4Ue2kKh0Bx66aEQyKmk0EJpKQGVmd21VrJWkhPLTt3fT1jv7LvPvPPM7HieHUk7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAJPXZSqWaHIiI5TPpcPXZVnNxi+f74/18XbPFciOS4l/s2xcHu10H/2ft6QeKb8ficPfR4dhXNPvi6r0P3PfEf4+O9OffIqHP6ugO45KIt4qkLr2wsnL+1V1I5Db6zs9uepZ/rBbf57NG3m7mi7X5LM3bzXRmerryyOm5djqXL2Tts+1OtpjWW1mt02ylJ+on0+rMzFSaTZxtLjfmZ2sLWb/z8S9PVirT6TMTS1mt1W42Hnlmol0/nS8s5I35Mmay8noUMY8XO+KzeSftZLXFNL1wceX81HapFkHVdT171+04hx++7+PXPvrrxfPFDjlskKS3Y05Wq5OT1enHZh57vFIZnaxMru+obBDXI2IkoojYlZ2WL7r9cX3funUHb/icRrr1P2Ih8mjEcpyJNNIYKb+vfY3FvpiNVjRjsXj8+7ENz99Q///vkT//dqvlDtb/fpU/uPb0oSjr/5HuoyND6n9xUN6Yxy59Xf5NxAfdbAb7r8QbcTUuxQuxEitxPl69Xfl81q+RHcbt678SW8fNRxaNyKMdzchjMWplT9rrSWMmpmM6KvFcnI65aEcac5HHQmTRjrPRjk5k5R5Vj1ZkUYtONKMVaZyIepyMNKoxEzMxFWlkMRFnoxnL0Yj5mI1aOcqFuFhu96kNeT3wzeeTt3738bvF9PWg6hYrkhRv5oqgv2wR1CvmD8WO6v/+3hZcH6H+3236/1V2Gn8Ljtpwa6yW9X/0TqcBAAAA7KKk/Ol7EhFj8WA5NZcvZF+702kBAAAAt1D5d82Hi2asmHowkuL8v7JJ5Ie3PTcAAADg1kjKz9glETEeD3Wn+h+X2uyHAAAAAMC/ofL3/0eKZjzizbLD+T8AAADcZb417Br7H+3pXaO3vbQ3uacXvXTm4eRyrZiqXe719ZqvXh+xM3coOdAbpGymR6/em0TEaD07nPSvfvnp3m77STnCobULEA671n/Sao0l14YnEFsnUD6K78bRbszRc932XP+Z7lLG5/KFbKLeXHiimvR+ONJ57aWL34golv7txuKBJC5cXDk/8eLLK+fKXK4Vo1y73Ls8fHITuaz2tkA8uPkaj5UfxOgtd7y73Mrg+o90Zx/ZepnJ4DLfjmPdmGPj3XZ8/frvK5ZZnXiiGrXagZFOdqbz2urA2veyqH7ONX87jndjjp843m02yWJyXRYv3ZjF5GAWO9sWW2ZR6Gfx7tE3z/ztl80km9oui6nPmQXAnXKhvOrPWhXaX1ahf652FfV/Q93tX9V806Pc//+kdwzdcJS7sPYuoz//QK0bjVtT3d+OE92YE933E6OH1tWVp8q6UtnkiP7KxVd+1TuiP/r+D3/09SO//vHQ6vZU913B8Czej5PdyF4T9//ihupWDFEtt+z3NlTV94o53htaVdsLk0mMxcjqf11/unydImJyarryaKXy2GSMlW8Ves3wTPfufC8B4G6z7T12dnAXnkc3P6uOfsW7//qfFEzEi/FyrMS5OFV+2iAiHtp81PGBP0M4tc1Z6/jAHV5ObXNuuRY7uTF27/EkhsRODWyx//1B2fx9914TANhtx7apwzup/6e2Pu/eUMtPdm+c2z87juG1fDNf2e0NAgD/AbLWJ8l4552k1cqXnqvOzFRrndNZ2mrWn01b+ex8luaNTtaqn6415rN0qdXsNOv9X1rOZu20vby01Py0k841W+lSs52fKe/8nvZu/d7OFmuN16PeXlrIau0srTcbnVq9k87m7Xq6tPz0Qt4+nbXKmdtLWT2fy+u1Tt5spO3mcqueTaRpO8sGAvPZrNHJ5/JispEutfLFWutaRCwsL2bpbNaut/KlTrM7YH9ZeWOu2Vosh524cfX/dLu3NwB8EVx54+qlF1ZWzr+6fmI12diz+cQfdhBzJWL1Tq8mADBgsEoDAAAAAAAAAAAAAABfTDd+XK/o3fYjfYMTY3ETwRsm9sZnmevunfjSB92X5VYMuMk4e7ac6561nv3rXtM9vZ3lzm+fm554/sknLw2LefrNg6f/mEVsP87m/1Ou3HvD3hvvHIjY89Pvd3ueul1r+mF01yJGb2r21WSLmDt2SAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAof4VAAD//5lPUOA=") stat(&(0x7f0000000300)='./file1\x00', 0x0) 5m10.137081335s ago: executing program 4 (id=8063): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000000)={[{@map_off}, {@check_strict}, {@cruft}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x551, &(0x7f00000003c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 5m9.922938447s ago: executing program 4 (id=8064): unshare(0x26020400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 5m9.491752783s ago: executing program 4 (id=8071): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x27, 0x14, 0x0, &(0x7f0000000140)="e90204000000000000007f530800d31e0edf4dd3", 0x0, 0x409, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m8.997545771s ago: executing program 33 (id=8071): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x27, 0x14, 0x0, &(0x7f0000000140)="e90204000000000000007f530800d31e0edf4dd3", 0x0, 0x409, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.007159572s ago: executing program 2 (id=12347): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f00000000c0)=[@t={0x81, 0x8, 0x0, 0x0, @generic}], 0x8) 1.824260743s ago: executing program 2 (id=12351): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x5c, 0xa, 0x1, "3258c5c000e12d001b0000f400"}) 1.672238182s ago: executing program 3 (id=12354): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/\\/o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) tee(r0, 0xffffffffffffffff, 0x8f5, 0x100000000000000) 0s ago: executing program 2 (id=12378): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x50}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): ity change from 0 to 1764 [ 836.611197][T29286] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 836.944575][T29294] loop2: detected capacity change from 0 to 4096 [ 836.960647][T29294] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 837.524260][T29320] syz.5.10441[29320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 837.524391][T29320] syz.5.10441[29320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 837.701900][ T28] audit: type=1326 audit(2000000264.080:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29327 comm="syz.0.10444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 837.757253][T29326] loop3: detected capacity change from 0 to 16 [ 837.807888][T29326] erofs: (device loop3): mounted with root inode @ nid 36. [ 837.824131][ T28] audit: type=1326 audit(2000000264.080:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29327 comm="syz.0.10444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 837.927873][ T28] audit: type=1326 audit(2000000264.120:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29327 comm="syz.0.10444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 838.006878][ T28] audit: type=1326 audit(2000000264.120:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29327 comm="syz.0.10444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 838.030089][ T28] audit: type=1326 audit(2000000264.120:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29327 comm="syz.0.10444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 838.369855][T29348] loop3: detected capacity change from 0 to 16 [ 838.392383][T29348] erofs: (device loop3): mounted with root inode @ nid 36. [ 838.419239][T29348] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 838.437713][T29348] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 838.937607][T29344] loop2: detected capacity change from 0 to 32768 [ 838.959536][T29344] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 838.982860][T29344] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 839.075545][T29344] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 839.144120][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 839.166084][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 839.347318][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 181ms [ 839.354991][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 839.387144][T29344] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 839.874430][T29374] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10467'. [ 840.476683][ T8] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 840.675619][ T8] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 840.696164][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.704207][ T8] usb 6-1: Product: syz [ 840.711802][T29376] loop3: detected capacity change from 0 to 32768 [ 840.726796][ T8] usb 6-1: Manufacturer: syz [ 840.731529][ T8] usb 6-1: SerialNumber: syz [ 840.783385][T29376] JBD2: Ignoring recovery information on journal [ 840.810412][ T8] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 840.855061][T29403] loop0: detected capacity change from 0 to 64 [ 840.893217][ T786] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 840.984190][T29376] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 841.190220][T29376] (syz.3.10468,29376,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=51539607617, rec_len=0, name_len=0 [ 841.251705][T29376] (syz.3.10468,29376,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 841.277286][T29376] (syz.3.10468,29376,0):ocfs2_mknod:298 ERROR: status = -2 [ 841.284928][T29376] (syz.3.10468,29376,0):ocfs2_mknod:502 ERROR: status = -2 [ 841.368994][ T23] usb 6-1: USB disconnect, device number 10 [ 841.384273][T29376] (syz.3.10468,29376,1):ocfs2_create:676 ERROR: status = -2 [ 841.500492][ T5767] ocfs2: Unmounting device (7,3) on (node local) [ 841.687050][ T28] audit: type=1326 audit(2000000268.070:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29415 comm="syz.2.10488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f79aeb9 code=0x0 [ 841.946844][T29411] loop0: detected capacity change from 0 to 32768 [ 841.986411][T29411] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 842.022956][ T786] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 842.038679][ T786] ath9k_htc: Failed to initialize the device [ 842.050683][ T23] usb 6-1: ath9k_htc: USB layer deinitialized [ 842.072724][T29424] loop5: detected capacity change from 0 to 1024 [ 842.167593][ T5759] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 842.338437][T29432] loop3: detected capacity change from 0 to 64 [ 842.681006][T29440] vlan1: entered allmulticast mode [ 842.702399][T29440] veth0_vlan: entered allmulticast mode [ 843.148471][T29456] netlink: 'syz.3.10507': attribute type 21 has an invalid length. [ 843.176171][T29456] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10507'. [ 843.195896][T29456] netlink: 'syz.3.10507': attribute type 4 has an invalid length. [ 843.240151][T29459] loop2: detected capacity change from 0 to 64 [ 843.517680][T29444] loop5: detected capacity change from 0 to 32768 [ 843.573520][T29444] (syz.5.10501,29444,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 843.628623][T29444] (syz.5.10501,29444,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 843.698284][T29470] binder: 29469:29470 ioctl 400c620e 200000000040 returned -22 [ 843.743536][T29444] JBD2: Ignoring recovery information on journal [ 843.870956][T29477] loop0: detected capacity change from 0 to 512 [ 843.904659][T29444] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 843.988852][T29477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 844.076273][T29477] ext4 filesystem being mounted at /2631/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 844.136315][T29491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10521'. [ 844.256914][T23911] ocfs2: Unmounting device (7,5) on (node local) [ 844.391827][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 845.336325][T29526] netlink: 'syz.3.10539': attribute type 1 has an invalid length. [ 845.344448][T29526] netlink: 'syz.3.10539': attribute type 2 has an invalid length. [ 845.376168][T29526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10539'. [ 845.524669][T29510] loop0: detected capacity change from 0 to 32768 [ 845.562468][T29510] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 845.655347][ T5760] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 846.256323][ T23] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 846.317323][T29536] loop2: detected capacity change from 0 to 32768 [ 846.449221][ T23] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 846.465898][ T23] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 846.492682][ T23] usb 6-1: config 0 interface 0 has no altsetting 0 [ 846.518828][T29536] UFO tlock:0xffffc9000285a0d8 [ 846.523083][ T23] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 846.555094][ T23] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 846.584253][ T23] usb 6-1: Product: syz [ 846.589219][ T23] usb 6-1: Manufacturer: syz [ 846.593849][ T23] usb 6-1: SerialNumber: syz [ 846.628547][ T23] usb 6-1: config 0 descriptor?? [ 846.658364][ T23] hub 6-1:0.0: bad descriptor, ignoring hub [ 846.686186][ T23] hub: probe of 6-1:0.0 failed with error -5 [ 846.703954][ T23] usb 6-1: selecting invalid altsetting 0 [ 846.773813][T29562] netlink: 'syz.0.10556': attribute type 3 has an invalid length. [ 846.826830][T29562] netlink: 'syz.0.10556': attribute type 3 has an invalid length. [ 846.836409][T29564] openvswitch: netlink: Message has 4 unknown bytes. [ 846.844201][T29562] netlink: 'syz.0.10556': attribute type 3 has an invalid length. [ 846.872645][T29562] netlink: 'syz.0.10556': attribute type 3 has an invalid length. [ 846.896343][T29562] netlink: 'syz.0.10556': attribute type 3 has an invalid length. [ 846.924902][T29562] netlink: 'syz.0.10556': attribute type 3 has an invalid length. [ 847.127243][ T966] usb 6-1: USB disconnect, device number 11 [ 847.407466][T29574] loop0: detected capacity change from 0 to 1764 [ 847.430969][T29558] loop3: detected capacity change from 0 to 32768 [ 847.477807][T29558] JBD2: Ignoring recovery information on journal [ 847.587505][T29558] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 847.781717][ T28] audit: type=1800 audit(2000000274.160:513): pid=29558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10554" name="file0" dev="loop3" ino=17058 res=0 errno=0 [ 847.886485][T29589] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10568'. [ 847.996739][ T5767] ocfs2: Unmounting device (7,3) on (node local) [ 848.254421][T29601] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 849.095920][T29623] loop5: detected capacity change from 0 to 2048 [ 849.112785][T29599] loop0: detected capacity change from 0 to 32768 [ 849.143585][T29599] JBD2: Ignoring recovery information on journal [ 849.214827][T29599] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 849.284891][T29626] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 849.357770][T29623] NILFS (loop5): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 849.372266][T29615] loop2: detected capacity change from 0 to 32768 [ 849.379772][T29623] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 849.418805][T29623] Remounting filesystem read-only [ 849.424604][T29623] NILFS (loop5): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 849.449633][T29615] JBD2: Ignoring recovery information on journal [ 849.483906][T29623] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 849.540726][T29623] NILFS (loop5): error -5 truncating bmap (ino=16) [ 849.592713][T29615] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 849.738748][ T28] audit: type=1800 audit(2000000276.120:514): pid=29615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10579" name="file0" dev="loop2" ino=17058 res=0 errno=0 [ 849.871207][T23911] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 849.907892][T23911] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 849.915236][T23911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 849.924441][T23911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 849.933599][T23911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 849.943240][T23911] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 850.002097][ T5765] ocfs2: Unmounting device (7,2) on (node local) [ 850.046893][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 850.388392][T29636] loop3: detected capacity change from 0 to 164 [ 851.046795][T29660] openvswitch: netlink: Actions may not be safe on all matching packets [ 851.925266][T29650] loop5: detected capacity change from 0 to 32768 [ 851.967927][T29650] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 852.045941][T29693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10619'. [ 852.076354][T29650] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 852.146953][T29650] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 852.186583][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 852.204470][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 852.361072][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 156ms [ 852.381060][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 852.407573][T29650] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 852.662942][T29713] validate_nla: 42 callbacks suppressed [ 852.662959][T29713] netlink: 'syz.0.10627': attribute type 2 has an invalid length. [ 852.726584][T29713] netlink: 'syz.0.10627': attribute type 8 has an invalid length. [ 852.796428][T29713] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10627'. [ 853.195129][T29733] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10628'. [ 853.549911][T29745] loop3: detected capacity change from 0 to 256 [ 853.604398][T29746] loop2: detected capacity change from 0 to 764 [ 853.678426][T29746] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 854.107606][T29760] loop0: detected capacity change from 0 to 4096 [ 854.135684][T29760] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 854.205112][T29760] ntfs3: loop0: Inode r=19 is not in use! [ 854.223988][T29764] loop2: detected capacity change from 0 to 1024 [ 854.230639][T29760] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 854.356600][T29764] hfsplus: hfsplus: Invalid key length: 29235 [ 855.047102][T29790] netlink: 'syz.3.10663': attribute type 1 has an invalid length. [ 855.055022][T29790] netlink: 232 bytes leftover after parsing attributes in process `syz.3.10663'. [ 855.179399][T29792] loop0: detected capacity change from 0 to 2048 [ 855.219503][T29792] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 855.615343][T29806] (unnamed net_device) (uninitialized): up delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 855.663567][T29806] (unnamed net_device) (uninitialized): down delay (2036) is not a multiple of miimon (100), value rounded to 2000 ms [ 855.756978][T29789] loop2: detected capacity change from 0 to 32768 [ 855.812840][T29789] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 855.836339][ T8] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 855.971583][T29789] XFS (loop2): Ending clean mount [ 856.069166][ T8] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 856.098691][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.146868][ T8] usb 6-1: Product: syz [ 856.151507][ T8] usb 6-1: Manufacturer: syz [ 856.157258][ T5765] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 856.167186][ T8] usb 6-1: SerialNumber: syz [ 856.190030][ T8] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 856.215840][ T786] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 856.723456][T15277] usb 6-1: USB disconnect, device number 12 [ 856.957261][T29849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10691'. [ 856.997737][T29852] loop2: detected capacity change from 0 to 16 [ 857.024266][T29852] erofs: (device loop2): mounted with root inode @ nid 36. [ 857.287095][ T786] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 857.304361][ T786] ath9k_htc: Failed to initialize the device [ 857.317855][T15277] usb 6-1: ath9k_htc: USB layer deinitialized [ 857.950714][T29883] loop0: detected capacity change from 0 to 164 [ 858.037602][T29859] loop2: detected capacity change from 0 to 32768 [ 858.255833][T29889] loop0: detected capacity change from 0 to 1764 [ 859.338302][T29922] loop3: detected capacity change from 0 to 4096 [ 859.683860][T29910] loop2: detected capacity change from 0 to 32768 [ 860.475360][T29957] loop2: detected capacity change from 0 to 1024 [ 860.546794][T29957] hfsplus: extend alloc file! (8192,512,17039360) [ 860.630001][T29960] netlink: 'syz.3.10745': attribute type 13 has an invalid length. [ 860.696583][T29960] netlink: 'syz.3.10745': attribute type 12 has an invalid length. [ 860.733846][T29964] loop2: detected capacity change from 0 to 256 [ 860.827043][T29964] FAT-fs (loop2): Directory bread(block 64) failed [ 860.836227][T29964] FAT-fs (loop2): Directory bread(block 65) failed [ 860.843086][T29964] FAT-fs (loop2): Directory bread(block 66) failed [ 860.878753][T29964] FAT-fs (loop2): Directory bread(block 67) failed [ 860.885612][T29964] FAT-fs (loop2): Directory bread(block 68) failed [ 860.893527][T29964] FAT-fs (loop2): Directory bread(block 69) failed [ 860.926254][T29964] FAT-fs (loop2): Directory bread(block 70) failed [ 860.945595][T29964] FAT-fs (loop2): Directory bread(block 71) failed [ 860.973926][T29964] FAT-fs (loop2): Directory bread(block 72) failed [ 860.997335][T29964] FAT-fs (loop2): Directory bread(block 73) failed [ 861.029276][T29941] loop5: detected capacity change from 0 to 32768 [ 861.072620][T29970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10750'. [ 861.137925][T29941] UFO tlock:0xffffc9000285a168 [ 861.157995][T29972] netlink: 'syz.3.10751': attribute type 10 has an invalid length. [ 861.181414][T29972] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10751'. [ 861.616622][T15277] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 861.802167][T29988] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10760'. [ 861.837109][T15277] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 861.845232][T15277] usb 1-1: config 0 has no interface number 0 [ 861.859295][T15277] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 101, changing to 7 [ 861.885536][T15277] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid maxpacket 26468, setting to 1024 [ 861.898489][T15277] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 861.908108][T15277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.920046][T15277] usb 1-1: config 0 descriptor?? [ 861.928894][T15277] ttusbir 1-1:0.83: cannot find expected altsetting [ 862.167357][T15277] usb 1-1: USB disconnect, device number 48 [ 862.847886][T30023] loop3: detected capacity change from 0 to 16 [ 862.877846][T30023] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 862.931004][ T5759] udevd[5759]: incorrect cramfs checksum on /dev/loop3 [ 862.999889][ T5759] udevd[5759]: incorrect cramfs checksum on /dev/loop3 [ 863.223654][T30036] loop0: detected capacity change from 0 to 764 [ 863.267006][T30036] Symlink component flag not implemented [ 863.300742][T30036] Symlink component flag not implemented [ 863.331723][T30036] Symlink component flag not implemented (129) [ 863.341756][T30036] Symlink component flag not implemented (6) [ 863.496770][T30041] loop3: detected capacity change from 0 to 1024 [ 863.559375][T30041] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 863.571006][T30046] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.10786'. [ 863.687739][T30041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 863.845267][T30041] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2852: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 863.915082][T30041] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.10785: missing EA_INODE flag [ 863.977349][T30041] EXT4-fs (loop3): Remounting filesystem read-only [ 864.131084][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.375504][T30080] loop5: detected capacity change from 0 to 256 [ 864.466964][T30080] FAT-fs (loop5): Directory bread(block 64) failed [ 864.473711][T30080] FAT-fs (loop5): Directory bread(block 65) failed [ 864.491782][T30080] FAT-fs (loop5): Directory bread(block 66) failed [ 864.501792][T30080] FAT-fs (loop5): Directory bread(block 67) failed [ 864.517844][T30080] FAT-fs (loop5): Directory bread(block 68) failed [ 864.524411][T30080] FAT-fs (loop5): Directory bread(block 69) failed [ 864.572574][T30080] FAT-fs (loop5): Directory bread(block 70) failed [ 864.603288][T30080] FAT-fs (loop5): Directory bread(block 71) failed [ 864.610469][T30080] FAT-fs (loop5): Directory bread(block 72) failed [ 864.623881][T30080] FAT-fs (loop5): Directory bread(block 73) failed [ 864.741759][T30080] FAT-fs (loop5): Filesystem has been set read-only [ 864.777544][ T28] audit: type=1800 audit(2000000291.160:515): pid=30080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10802" name="cgroup.controllers" dev="loop5" ino=1048772 res=0 errno=0 [ 864.806066][T30080] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000656c) [ 865.061801][ T23] IPVS: starting estimator thread 0... [ 865.162210][T30103] loop0: detected capacity change from 0 to 256 [ 865.176475][T30101] IPVS: using max 20 ests per chain, 48000 per kthread [ 865.187013][T30103] exfat: Deprecated parameter 'utf8' [ 865.216255][T30103] exfat: Deprecated parameter 'namecase' [ 865.227115][T30103] exfat: Deprecated parameter 'namecase' [ 865.245054][T30103] exfat: Deprecated parameter 'utf8' [ 865.295203][T30103] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 865.736493][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 865.926972][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 865.956430][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 865.974842][ T9] usb 3-1: config 0 has no interface number 0 [ 865.991941][ T9] usb 3-1: config 0 interface 1 has no altsetting 0 [ 866.016765][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 866.033465][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.052479][ T9] usb 3-1: Product: syz [ 866.062264][ T9] usb 3-1: Manufacturer: syz [ 866.076115][ T9] usb 3-1: SerialNumber: syz [ 866.089115][ T9] usb 3-1: config 0 descriptor?? [ 866.360011][ T9] i2c-cp2615: probe of 3-1:0.1 failed with error -22 [ 866.559966][ T9] usb 3-1: USB disconnect, device number 55 [ 866.620613][T30158] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 866.863888][T30169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10843'. [ 866.893851][T30169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10843'. [ 866.903067][T30169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10843'. [ 867.348584][T30189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10853'. [ 867.363764][T30188] loop2: detected capacity change from 0 to 1024 [ 867.548471][ T2955] hfsplus: b-tree write err: -5, ino 4 [ 867.576233][T30194] x_tables: unsorted underflow at hook 4 [ 867.998411][T30214] loop3: detected capacity change from 0 to 256 [ 868.005729][T30214] exfat: Deprecated parameter 'utf8' [ 868.039536][T30214] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 868.151140][T30219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10867'. [ 868.198193][T30220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10869'. [ 868.266463][T30220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10869'. [ 868.275543][T30220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10869'. [ 868.305915][T30222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10870'. [ 868.352043][T30224] Zero length message leads to an empty skb [ 868.603109][T30234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10876'. [ 868.986908][T30250] loop2: detected capacity change from 0 to 128 [ 869.049425][T30250] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 869.174823][T30253] loop5: detected capacity change from 0 to 4096 [ 869.290112][T30260] loop3: detected capacity change from 0 to 256 [ 869.326973][T30253] ntfs: volume version 3.1. [ 869.449858][T30253] ntfs: (device loop5): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 869.791290][T30274] loop5: detected capacity change from 0 to 64 [ 870.012333][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.600819][T30307] netlink: 'syz.2.10911': attribute type 27 has an invalid length. [ 870.692206][T30311] netlink: 'syz.5.10914': attribute type 5 has an invalid length. [ 870.720215][T30313] loop3: detected capacity change from 0 to 512 [ 870.783563][T30313] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 870.865988][T30313] System zones: 1-12 [ 870.931010][T30313] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.10915: invalid indirect mapped block 8 (level 2) [ 870.984827][T30313] EXT4-fs (loop3): Remounting filesystem read-only [ 871.009096][T30313] EXT4-fs (loop3): 1 truncate cleaned up [ 871.036337][T30313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 871.222570][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.335907][T30336] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 871.364068][T30336] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 871.539442][T30345] binder: 30344:30345 unknown command 1074553619 [ 871.616641][T30345] binder: 30344:30345 ioctl c0306201 200000000540 returned -22 [ 872.023794][T30360] loop5: detected capacity change from 0 to 2048 [ 872.047758][T30360] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 872.493008][T30382] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 872.696615][T30390] Cannot find del_set index 6 as target [ 872.765943][T30394] comedi comedi0: pcl816: I/O port conflict (0x6,16) [ 873.462137][T30424] __nla_validate_parse: 1 callbacks suppressed [ 873.462154][T30424] netlink: 180 bytes leftover after parsing attributes in process `syz.2.10967'. [ 873.620687][T30428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10969'. [ 873.661296][T30428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 873.732674][T30433] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10972'. [ 873.762479][T30433] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10972'. [ 873.796268][T30433] netlink: 'syz.2.10972': attribute type 3 has an invalid length. [ 873.823225][T30433] netlink: 11 bytes leftover after parsing attributes in process `syz.2.10972'. [ 874.031428][T30447] netlink: 'syz.5.10978': attribute type 1 has an invalid length. [ 874.439523][T30461] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 875.079436][T30489] loop5: detected capacity change from 0 to 512 [ 875.160246][T30489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 875.238828][T30497] loop2: detected capacity change from 0 to 64 [ 875.265500][T30489] ext4 filesystem being mounted at /676/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 875.428048][T30489] EXT4-fs error (device loop5): ext4_validate_inode_bitmap:106: comm syz.5.11000: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 875.508140][T30489] EXT4-fs error (device loop5) in ext4_free_inode:363: Filesystem failed CRC [ 875.680389][T23911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.835489][T30514] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 876.147006][ T28] audit: type=1326 audit(2000000302.530:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30525 comm="syz.3.11017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50039aeb9 code=0x7ffc0000 [ 876.219458][T30527] loop5: detected capacity change from 0 to 1764 [ 876.226196][ T28] audit: type=1326 audit(2000000302.530:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30525 comm="syz.3.11017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50039aeb9 code=0x7ffc0000 [ 876.302738][ T5759] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 876.316247][ T28] audit: type=1326 audit(2000000302.570:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30525 comm="syz.3.11017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fd50039aeb9 code=0x7ffc0000 [ 876.431089][ T28] audit: type=1326 audit(2000000302.570:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30525 comm="syz.3.11017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50039aeb9 code=0x7ffc0000 [ 876.511245][ T28] audit: type=1326 audit(2000000302.570:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30525 comm="syz.3.11017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50039aeb9 code=0x7ffc0000 [ 876.713311][ T786] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 876.872123][T30552] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11029'. [ 876.908254][ T786] usb 6-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 876.922957][ T786] usb 6-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid maxpacket 65278, setting to 1024 [ 876.964815][ T786] usb 6-1: config 0 interface 0 altsetting 60 bulk endpoint 0xD has invalid maxpacket 1024 [ 877.009256][ T786] usb 6-1: config 0 interface 0 has no altsetting 0 [ 877.035880][ T786] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 877.045799][T30556] loop2: detected capacity change from 0 to 256 [ 877.057399][ T786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.078236][ T786] usb 6-1: config 0 descriptor?? [ 877.084155][T30527] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 877.127465][T30556] FAT-fs (loop2): Directory bread(block 64) failed [ 877.134271][T30556] FAT-fs (loop2): Directory bread(block 65) failed [ 877.178270][T30556] FAT-fs (loop2): Directory bread(block 66) failed [ 877.184927][T30556] FAT-fs (loop2): Directory bread(block 67) failed [ 877.231073][T30556] FAT-fs (loop2): Directory bread(block 68) failed [ 877.272561][T30556] FAT-fs (loop2): Directory bread(block 69) failed [ 877.297445][T30556] FAT-fs (loop2): Directory bread(block 70) failed [ 877.304049][T30556] FAT-fs (loop2): Directory bread(block 71) failed [ 877.311716][ T786] usb 6-1: string descriptor 0 read error: -71 [ 877.337036][ T786] usb 6-1: ucan: probing device on interface #0 [ 877.343337][ T786] usb 6-1: ucan: invalid endpoint configuration [ 877.377133][T30556] FAT-fs (loop2): Directory bread(block 72) failed [ 877.386947][ T786] usb 6-1: ucan: probe failed; try to update the device firmware [ 877.407648][T30556] FAT-fs (loop2): Directory bread(block 73) failed [ 877.426813][ T786] usb 6-1: USB disconnect, device number 13 [ 877.527234][T30567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11036'. [ 877.556385][T30567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.871650][T30577] netlink: 460 bytes leftover after parsing attributes in process `syz.3.11041'. [ 878.057539][T30584] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 878.461077][T30602] netlink: 'syz.5.11052': attribute type 58 has an invalid length. [ 878.485312][T30602] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11052'. [ 878.607604][T30606] loop2: detected capacity change from 0 to 1024 [ 878.676947][T30606] hfsplus: cannot replace xattr [ 878.821519][T30614] netlink: 180 bytes leftover after parsing attributes in process `syz.5.11059'. [ 878.914603][T30616] loop3: detected capacity change from 0 to 16 [ 878.972392][T30616] erofs: (device loop3): mounted with root inode @ nid 36. [ 879.009090][T30620] loop0: detected capacity change from 0 to 2048 [ 879.016373][T30616] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 879.050259][T30620] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 879.060266][T30616] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 39 of nid 36 [ 879.325028][T30630] netlink: 'syz.0.11066': attribute type 2 has an invalid length. [ 879.363878][T30630] netlink: 'syz.0.11066': attribute type 1 has an invalid length. [ 879.391689][T30630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11066'. [ 879.572947][T30637] ieee802154 phy1 wpan1: encryption failed: -90 [ 880.420176][T30642] loop5: detected capacity change from 0 to 32768 [ 880.666540][T30642] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 880.866365][T30642] XFS (loop5): Ending clean mount [ 881.004921][T30642] XFS: no-recovery mounts must be read-only. [ 881.062605][T23911] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 881.622826][T30688] loop3: detected capacity change from 0 to 32768 [ 881.763342][T30675] loop2: detected capacity change from 0 to 32768 [ 881.770544][T30688] ERROR: (device loop3): diWrite: ixpxd invalid [ 881.770544][T30688] [ 881.848748][T30688] ERROR: (device loop3): remounting filesystem as read-only [ 881.877370][T30688] ERROR: (device loop3): txCommit: [ 881.877370][T30688] [ 881.893925][T30675] ea_get: invalid extended attribute [ 881.916260][T30688] imap: ffff888078458000: 07ffffff 00000000 00000000 00000000 [ 881.954484][T30688] imap: ffff888078458010: 00000004 00000002 00000000 00000000 [ 881.984562][T30688] ERROR: (device loop3): diFree: inum = 7, iagno = 0, nextiag = 0 [ 881.984562][T30688] [ 882.452002][T30717] loop0: detected capacity change from 0 to 64 [ 883.126519][T30701] loop5: detected capacity change from 0 to 32768 [ 883.179938][T30701] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 883.196247][T30701] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 883.344731][T30701] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 883.403444][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 883.424799][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 883.569418][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 144ms [ 883.586274][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 883.591557][T30701] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 884.464798][ T28] audit: type=1326 audit(2000000310.840:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30779 comm="syz.5.11133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6459aeb9 code=0x7ffc0000 [ 884.498934][T30777] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 884.549055][ T28] audit: type=1326 audit(2000000310.840:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30779 comm="syz.5.11133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6459aeb9 code=0x7ffc0000 [ 884.656098][ T28] audit: type=1326 audit(2000000310.870:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30779 comm="syz.5.11133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fac6459aeb9 code=0x7ffc0000 [ 884.702990][ T28] audit: type=1326 audit(2000000310.870:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30779 comm="syz.5.11133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6459aeb9 code=0x7ffc0000 [ 884.786246][ T28] audit: type=1326 audit(2000000310.870:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30779 comm="syz.5.11133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6459aeb9 code=0x7ffc0000 [ 884.829798][T30788] loop3: detected capacity change from 0 to 1024 [ 884.919742][T30790] loop2: detected capacity change from 0 to 64 [ 885.017855][ T12] hfsplus: b-tree write err: -5, ino 4 [ 885.484527][T30804] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 885.520695][T30782] loop0: detected capacity change from 0 to 32768 [ 885.554349][T30804] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 885.583549][T30782] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 885.838378][T30782] XFS (loop0): Ending clean mount [ 885.992051][T30821] loop3: detected capacity change from 0 to 512 [ 886.068067][T30821] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 886.099371][ T5770] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 886.117027][T30821] System zones: 0-2, 18-18, 34-34 [ 886.122450][T30821] EXT4-fs (loop3): orphan cleanup on readonly fs [ 886.182193][T30821] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.11149: bg 0: block 248: padding at end of block bitmap is not set [ 886.240242][T30821] Quota error (device loop3): write_blk: dquota write failed [ 886.256443][T30821] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 886.277504][T30821] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.11149: Failed to acquire dquot type 1 [ 886.325726][T30821] EXT4-fs (loop3): 1 orphan inode deleted [ 886.345629][ T12] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 886.376896][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:1: Failed to release dquot type 1 [ 886.418298][T30821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 886.534437][T30821] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.11149: deleted inode referenced: 12 [ 886.667414][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.158857][T30850] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11163'. [ 887.447166][T30861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11168'. [ 887.482293][T30861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11168'. [ 887.747921][T30867] loop0: detected capacity change from 0 to 4096 [ 887.801890][T30867] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 887.862071][T30867] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 887.915341][T30867] ntfs3: loop0: Failed to load $Extend (-22). [ 887.926485][T30867] ntfs3: loop0: Failed to initialize $Extend. [ 888.100978][T30885] loop3: detected capacity change from 0 to 256 [ 888.138201][T30885] exfat: Deprecated parameter 'utf8' [ 888.204748][T30885] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc6db6723, utbl_chksum : 0xe619d30d) [ 888.306873][T30889] netlink: 'syz.0.11182': attribute type 10 has an invalid length. [ 888.322787][T30885] overlay: filesystem on ./file0 not supported [ 888.346388][T30889] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 888.354189][T30891] ubi: mtd0 is already attached to ubi31 [ 888.400208][T30889] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 888.438925][T30893] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.11184'. [ 888.646572][T30897] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 888.764520][T30904] netlink: 'syz.2.11190': attribute type 10 has an invalid length. [ 888.804314][T30904] .`: (slave wlan1): Enslaving as an active interface with an up link [ 888.826052][T30907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11191'. [ 889.218709][T30923] loop3: detected capacity change from 0 to 16 [ 889.234005][T30923] erofs: (device loop3): mounted with root inode @ nid 36. [ 889.526243][T30933] xt_CT: You must specify a L4 protocol and not use inversions on it [ 890.033098][T30957] loop0: detected capacity change from 0 to 512 [ 890.071475][T30957] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 890.086542][T30957] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 890.096907][T30957] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.11215: Corrupt directory, running e2fsck is recommended [ 890.112965][T30957] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 890.121536][T30957] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.11215: corrupted in-inode xattr: invalid ea_ino [ 890.145605][T30957] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.11215: couldn't read orphan inode 15 (err -117) [ 890.183345][T30957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 890.312554][T30957] EXT4-fs error (device loop0): __ext4_remount:6752: comm syz.0.11215: Abort forced by user [ 890.349112][T30957] EXT4-fs (loop0): Remounting filesystem read-only [ 890.355690][T30957] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 890.416331][T30971] netlink: 'syz.5.11221': attribute type 5 has an invalid length. [ 890.448762][T30973] loop3: detected capacity change from 0 to 256 [ 890.480328][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.548611][T30973] FAT-fs (loop3): Directory bread(block 64) failed [ 890.555306][T30973] FAT-fs (loop3): Directory bread(block 65) failed [ 890.616457][T30973] FAT-fs (loop3): Directory bread(block 66) failed [ 890.623151][T30973] FAT-fs (loop3): Directory bread(block 67) failed [ 890.660990][T30973] FAT-fs (loop3): Directory bread(block 68) failed [ 890.700584][T30973] FAT-fs (loop3): Directory bread(block 69) failed [ 890.717073][T30973] FAT-fs (loop3): Directory bread(block 70) failed [ 890.741467][T30973] FAT-fs (loop3): Directory bread(block 71) failed [ 890.761581][T30973] FAT-fs (loop3): Directory bread(block 72) failed [ 890.776205][T30973] FAT-fs (loop3): Directory bread(block 73) failed [ 890.853365][T30981] loop2: detected capacity change from 0 to 2048 [ 890.939046][T30981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 891.046222][T30981] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 891.442974][T30999] loop3: detected capacity change from 0 to 256 [ 891.518846][T30999] FAT-fs (loop3): Directory bread(block 64) failed [ 891.544877][T30999] FAT-fs (loop3): Directory bread(block 65) failed [ 891.552962][T30999] FAT-fs (loop3): Directory bread(block 66) failed [ 891.571950][T30999] FAT-fs (loop3): Directory bread(block 67) failed [ 891.603223][T30999] FAT-fs (loop3): Directory bread(block 68) failed [ 891.622787][T30999] FAT-fs (loop3): Directory bread(block 69) failed [ 891.653440][T30999] FAT-fs (loop3): Directory bread(block 70) failed [ 891.666315][T30999] FAT-fs (loop3): Directory bread(block 71) failed [ 891.673070][T30999] FAT-fs (loop3): Directory bread(block 72) failed [ 891.690193][T31005] loop5: detected capacity change from 0 to 4096 [ 891.726187][T30999] FAT-fs (loop3): Directory bread(block 73) failed [ 891.765150][T31005] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 891.863777][T31005] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 892.343587][ T28] audit: type=1326 audit(2000000318.720:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31024 comm="syz.0.11248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 892.379114][ T28] audit: type=1326 audit(2000000318.720:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31024 comm="syz.0.11248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 892.403162][ T28] audit: type=1326 audit(2000000318.750:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31024 comm="syz.0.11248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 892.406950][ T23] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 892.473823][ T28] audit: type=1326 audit(2000000318.750:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31024 comm="syz.0.11248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 892.576405][ T28] audit: type=1326 audit(2000000318.750:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31024 comm="syz.0.11248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 892.671596][T31035] loop3: detected capacity change from 0 to 65 [ 892.682001][T31035] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 892.686438][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 892.692633][T31035] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 892.716112][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 892.760779][ T23] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 892.779543][ T23] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 892.790522][ T23] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 892.813205][ T23] usb 3-1: config 128 has no interface number 0 [ 892.827612][ T23] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 892.866916][ T23] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 892.896170][ T23] usb 3-1: config 128 interface 127 has no altsetting 0 [ 892.906419][T15277] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 892.933979][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 892.962791][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.980490][ T23] usb 3-1: Product: syz [ 892.985098][ T23] usb 3-1: Manufacturer: syz [ 892.993414][ T23] usb 3-1: SerialNumber: syz [ 893.126324][T15277] usb 1-1: Using ep0 maxpacket: 32 [ 893.135292][T15277] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 893.149220][T15277] usb 1-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 893.166393][T15277] usb 1-1: Product: syz [ 893.175147][T15277] usb 1-1: config 0 descriptor?? [ 893.238023][T31045] netlink: 'syz.3.11258': attribute type 10 has an invalid length. [ 893.255446][T31045] .`: (slave wlan1): Enslaving as an active interface with an up link [ 893.284174][ T23] usb 3-1: USB disconnect, device number 56 [ 893.379172][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 893.421924][T15277] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33 [ 893.668707][ T8] usb 1-1: USB disconnect, device number 49 [ 893.731736][T31055] loop5: detected capacity change from 0 to 2048 [ 893.784620][T31055] loop5: p2 p3 p7 [ 893.792158][T31057] loop3: detected capacity change from 0 to 1764 [ 894.074493][T31061] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11266'. [ 894.109951][T31061] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11266'. [ 894.192140][ T5756] udevd[5756]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 894.203468][ T5759] udevd[5759]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 894.228374][ T5760] udevd[5760]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 894.623104][T31077] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11274'. [ 894.860351][T31083] netlink: 'syz.0.11277': attribute type 10 has an invalid length. [ 894.922900][T31083] .`: (slave wlan1): Enslaving as an active interface with an up link [ 894.970016][T31065] loop3: detected capacity change from 0 to 32768 [ 895.023649][T31065] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 895.090196][T31097] loop2: detected capacity change from 0 to 512 [ 895.167554][T31097] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff7fff) [ 895.192854][T31097] FAT-fs (loop2): Filesystem has been set read-only [ 895.422696][T31065] XFS (loop3): Ending clean mount [ 895.614229][ T5767] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 895.721875][T31113] loop2: detected capacity change from 0 to 256 [ 895.747210][T31113] exfat: Deprecated parameter 'namecase' [ 895.808741][T31113] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 897.069206][T31155] loop3: detected capacity change from 0 to 128 [ 897.103240][T31155] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 897.151043][T31155] ext4 filesystem being mounted at /2880/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 897.378211][ T5767] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 897.645726][T31153] loop2: detected capacity change from 0 to 32768 [ 897.705527][T31153] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.11308 (31153) [ 897.745928][T31153] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 897.782876][T31153] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 897.802175][T31153] BTRFS info (device loop2): using free space tree [ 897.901314][T31182] netlink: 830 bytes leftover after parsing attributes in process `syz.5.11317'. [ 897.966843][T31153] BTRFS info (device loop2): enabling ssd optimizations [ 897.981503][T31153] BTRFS info (device loop2): auto enabling async discard [ 898.099401][T31195] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11319'. [ 898.215329][ T5765] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 898.536235][T31206] loop3: detected capacity change from 0 to 1024 [ 898.662805][T31206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.796152][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.350204][T31228] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 899.731741][T31240] netlink: 'syz.2.11341': attribute type 5 has an invalid length. [ 899.934957][ T28] audit: type=1326 audit(2000000326.310:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31247 comm="syz.3.11345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd50039aeb9 code=0x0 [ 900.278911][T31256] loop3: detected capacity change from 0 to 2048 [ 900.326452][T31256] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 900.376542][T31256] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 900.836346][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 900.871230][ T28] audit: type=1400 audit(2000000327.250:532): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=31281 comm="syz.0.11362" [ 900.966797][T31286] blktrace: Concurrent blktraces are not allowed on loop4 [ 901.028004][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 901.045271][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.087295][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 901.112190][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.132693][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.157873][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 901.176699][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 901.202681][ T9] usb 3-1: Product: syz [ 901.216290][ T9] usb 3-1: Manufacturer: syz [ 901.239836][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 901.264245][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 901.276948][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 901.293100][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 901.467744][T31301] netlink: 'syz.3.11371': attribute type 1 has an invalid length. [ 901.503569][T31267] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 901.545805][ T9] usb 3-1: USB disconnect, device number 57 [ 901.795062][T31293] loop5: detected capacity change from 0 to 32768 [ 901.917516][ T11] read_mapping_page failed! [ 901.922122][ T11] ERROR: (device loop5): txCommit: [ 901.922122][ T11] [ 902.002996][ T11] jfs_write_inode: jfs_commit_inode failed! [ 902.843940][T31318] loop3: detected capacity change from 0 to 32768 [ 902.869616][T31346] loop5: detected capacity change from 0 to 64 [ 902.887395][T31346] hfs: unable to locate alternate MDB [ 902.892881][T31346] hfs: continuing without an alternate MDB [ 902.933716][T31318] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 903.114794][T31360] loop2: detected capacity change from 0 to 256 [ 903.144309][T31318] XFS (loop3): Ending clean mount [ 903.179621][T31318] XFS (loop3): Quotacheck needed: Please wait. [ 903.323720][T31318] XFS (loop3): Quotacheck: Done. [ 903.617061][ T5767] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 903.704126][T31374] loop5: detected capacity change from 0 to 4096 [ 903.774496][T31374] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 903.846052][T31374] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 903.883637][T31374] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 903.916283][T31374] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 904.038550][T31374] ntfs: volume version 3.1. [ 904.072590][T31374] ntfs: (device loop5): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 904.086066][T31374] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 904.959130][T31416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11425'. [ 905.457740][T31430] loop2: detected capacity change from 0 to 1764 [ 905.760366][T31442] netlink: set zone limit has 8 unknown bytes [ 906.314798][T31467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11450'. [ 906.514598][T31476] syz.2.11454: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 906.515300][T31476] CPU: 1 PID: 31476 Comm: syz.2.11454 Not tainted syzkaller #0 [ 906.515320][T31476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 906.515333][T31476] Call Trace: [ 906.515341][T31476] [ 906.515351][T31476] dump_stack_lvl+0x18c/0x250 [ 906.515386][T31476] ? show_regs_print_info+0x20/0x20 [ 906.515412][T31476] ? load_image+0x400/0x400 [ 906.515439][T31476] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 906.515463][T31476] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 906.515489][T31476] warn_alloc+0x246/0x340 [ 906.515518][T31476] ? stack_trace_save+0xaa/0x100 [ 906.515543][T31476] ? zone_watermark_ok_safe+0x230/0x230 [ 906.515580][T31476] ? kasan_set_track+0x5f/0x70 [ 906.515599][T31476] ? kasan_set_track+0x4e/0x70 [ 906.515618][T31476] ? __kasan_kmalloc+0x8f/0xa0 [ 906.515638][T31476] ? xsk_init_queue+0xad/0x100 [ 906.515658][T31476] ? xsk_setsockopt+0x42e/0x760 [ 906.515678][T31476] ? do_sock_setsockopt+0x175/0x1a0 [ 906.515704][T31476] ? __x64_sys_setsockopt+0x182/0x200 [ 906.515735][T31476] __vmalloc_node_range+0x126/0x1330 [ 906.515785][T31476] ? free_vm_area+0x50/0x50 [ 906.515818][T31476] vmalloc_user+0x74/0x80 [ 906.515842][T31476] ? xskq_create+0xbf/0x170 [ 906.515863][T31476] xskq_create+0xbf/0x170 [ 906.515888][T31476] xsk_init_queue+0xad/0x100 [ 906.515912][T31476] xsk_setsockopt+0x42e/0x760 [ 906.515936][T31476] ? xsk_poll+0x680/0x680 [ 906.515959][T31476] ? __fget_files+0x28/0x4b0 [ 906.515982][T31476] ? __fget_files+0x28/0x4b0 [ 906.516020][T31476] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 906.516044][T31476] ? security_socket_setsockopt+0x7e/0xa0 [ 906.516065][T31476] ? xsk_poll+0x680/0x680 [ 906.516088][T31476] do_sock_setsockopt+0x175/0x1a0 [ 906.516116][T31476] ? __fdget+0x180/0x210 [ 906.516142][T31476] __x64_sys_setsockopt+0x182/0x200 [ 906.516175][T31476] do_syscall_64+0x55/0xa0 [ 906.516199][T31476] ? clear_bhb_loop+0x40/0x90 [ 906.516219][T31476] ? clear_bhb_loop+0x40/0x90 [ 906.516241][T31476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 906.516260][T31476] RIP: 0033:0x7fbe3f79aeb9 [ 906.516277][T31476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.516293][T31476] RSP: 002b:00007fbe406bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 906.516313][T31476] RAX: ffffffffffffffda RBX: 00007fbe3fa15fa0 RCX: 00007fbe3f79aeb9 [ 906.516328][T31476] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 906.516340][T31476] RBP: 00007fbe3f808c1f R08: 0000000000000004 R09: 0000000000000000 [ 906.516353][T31476] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.516366][T31476] R13: 00007fbe3fa16038 R14: 00007fbe3fa15fa0 R15: 00007ffff5157c68 [ 906.516393][T31476] [ 906.524686][T31476] Mem-Info: [ 906.524698][T31476] active_anon:7216 inactive_anon:30 isolated_anon:0 [ 906.524698][T31476] active_file:18278 inactive_file:41833 isolated_file:0 [ 906.524698][T31476] unevictable:768 dirty:343 writeback:0 [ 906.524698][T31476] slab_reclaimable:11907 slab_unreclaimable:104241 [ 906.524698][T31476] mapped:25069 shmem:1417 pagetables:760 [ 906.524698][T31476] sec_pagetables:0 bounce:0 [ 906.524698][T31476] kernel_misc_reclaimable:0 [ 906.524698][T31476] free:1316862 free_pcp:8669 free_cma:0 [ 906.524751][T31476] Node 0 active_anon:28864kB inactive_anon:120kB active_file:49296kB inactive_file:167096kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100276kB dirty:1372kB writeback:0kB shmem:4132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12716kB pagetables:3040kB sec_pagetables:0kB all_unreclaimable? no [ 906.524799][T31476] Node 1 active_anon:0kB inactive_anon:0kB active_file:23816kB inactive_file:236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 906.524843][T31476] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 906.524893][T31476] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 906.527316][T31476] Node 0 DMA32 free:1371704kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:28820kB inactive_anon:120kB active_file:49296kB inactive_file:166280kB unevictable:1536kB writepending:1372kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:21664kB local_pcp:19808kB free_cma:0kB [ 906.527372][T31476] lowmem_reserve[]: 0 0 0 0 0 [ 906.527412][T31476] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 906.527462][T31476] lowmem_reserve[]: 0 0 0 0 0 [ 906.527503][T31476] Node 1 Normal free:3880384kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:23816kB inactive_file:236kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12996kB local_pcp:12996kB free_cma:0kB [ 906.527554][T31476] lowmem_reserve[]: 0 0 0 0 0 [ 906.527594][T31476] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 906.527787][T31476] Node 0 DMA32: 1948*4kB (ME) 921*8kB (UM) 88*16kB (UME) 244*32kB (UME) 190*64kB (UME) 47*128kB (UME) 42*256kB (UME) 25*512kB (UME) 13*1024kB (UME) 5*2048kB (UME) 313*4096kB (UM) = 1371704kB [ 906.527964][T31476] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 906.528079][T31476] Node 1 Normal: 624*4kB (UME) 414*8kB (UME) 439*16kB (UME) 461*32kB (UME) 182*64kB (UME) 29*128kB (UM) 8*256kB (UM) 7*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 934*4096kB (M) = 3880384kB [ 906.528260][T31476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 906.528276][T31476] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 906.528291][T31476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 906.528306][T31476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 906.528321][T31476] 60260 total pagecache pages [ 906.528332][T31476] 30 pages in swap cache [ 906.528339][T31476] Free swap = 124472kB [ 906.528347][T31476] Total swap = 124996kB [ 906.528356][T31476] 2097051 pages RAM [ 906.528363][T31476] 0 pages HighMem/MovableOnly [ 906.528370][T31476] 416922 pages reserved [ 906.528378][T31476] 0 pages cma reserved [ 906.673877][T31481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11457'. [ 906.673966][T31481] netlink: 540 bytes leftover after parsing attributes in process `syz.2.11457'. [ 906.722151][T31483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11458'. [ 907.296242][ T5773] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 907.557670][ T5773] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 907.709920][T31475] tty tty4: ldisc open failed (-12), clearing slot 3 [ 907.713755][ T5773] usb 1-1: config 0 has no interface number 0 [ 907.724151][ T5773] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 907.738195][ T5773] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 907.766273][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.776960][ T5773] usb 1-1: Product: syz [ 907.781176][ T5773] usb 1-1: Manufacturer: syz [ 907.796381][ T5773] usb 1-1: SerialNumber: syz [ 907.807380][ T5773] usb 1-1: config 0 descriptor?? [ 907.862826][ T5773] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 908.184108][T31510] loop3: detected capacity change from 0 to 64 [ 908.300250][T31510] Trying to free block not in datazone [ 908.319248][ T9] usb 1-1: USB disconnect, device number 50 [ 908.342974][ T9] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 908.724233][T31526] loop5: detected capacity change from 0 to 512 [ 908.738149][T31526] EXT4-fs: Ignoring removed bh option [ 908.746767][T31523] loop3: detected capacity change from 0 to 2048 [ 908.758214][T31526] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.11478: Invalid inode bitmap blk 4 in block_group 0 [ 908.783996][T31526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.798148][T31523] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 908.916852][T31526] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 908.982373][T31526] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.11478: Invalid inode bitmap blk 4 in block_group 0 [ 909.008698][T31526] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 909.121978][T23911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.146690][T31537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11484'. [ 909.204881][T31539] netlink: 'syz.0.11486': attribute type 1 has an invalid length. [ 909.339563][T31545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11488'. [ 910.620779][T31561] loop2: detected capacity change from 0 to 40427 [ 910.637272][T31561] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 910.645978][T31561] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 910.696254][T15277] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 910.715799][T31561] F2FS-fs (loop2): Found nat_bits in checkpoint [ 910.765210][T31561] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 910.778659][T31561] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 910.837877][T31561] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 910.886422][T15277] usb 6-1: Using ep0 maxpacket: 16 [ 910.898144][T15277] usb 6-1: config 0 has an invalid interface number: 223 but max is 0 [ 910.928183][T15277] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.956245][T15277] usb 6-1: config 0 has no interface number 0 [ 910.964931][T15277] usb 6-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 910.978449][T15277] usb 6-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 911.002214][T15277] usb 6-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 911.027208][T15277] usb 6-1: config 0 interface 223 has no altsetting 0 [ 911.038989][T15277] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 911.069450][T15277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.092454][T15277] usb 6-1: Product: syz [ 911.102223][T15277] usb 6-1: Manufacturer: syz [ 911.112365][T15277] usb 6-1: SerialNumber: syz [ 911.124877][T15277] usb 6-1: config 0 descriptor?? [ 911.511558][T31597] raw_sendmsg: syz.2.11513 forgot to set AF_INET. Fix it! [ 911.590319][T15277] usb 6-1: USB disconnect, device number 14 [ 911.918373][T31615] netlink: 404 bytes leftover after parsing attributes in process `syz.2.11521'. [ 911.928557][T31615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11521'. [ 911.938344][T31615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11521'. [ 911.955775][T31615] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11521'. [ 912.421667][T31637] netlink: 64 bytes leftover after parsing attributes in process `syz.5.11532'. [ 912.756205][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 912.956304][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 912.974951][ T9] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 912.985603][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.995937][ T9] usb 1-1: Product: syz [ 913.009516][ T9] usb 1-1: Manufacturer: syz [ 913.014186][ T9] usb 1-1: SerialNumber: syz [ 913.026839][T31661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11543'. [ 913.037721][ T9] usb 1-1: config 0 descriptor?? [ 913.051037][ T9] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 913.106142][ T5805] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 913.131926][T31663] netlink: 'syz.5.11546': attribute type 10 has an invalid length. [ 913.159419][T31663] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11546'. [ 913.183342][T31663] netlink: 'syz.5.11546': attribute type 10 has an invalid length. [ 913.194818][T31663] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11546'. [ 913.206759][T31665] netlink: 'syz.2.11545': attribute type 5 has an invalid length. [ 913.316154][ T5805] usb 4-1: Using ep0 maxpacket: 16 [ 913.336835][ T5805] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=81.0c [ 913.361625][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.390416][ T5805] usb 4-1: Product: syz [ 913.394682][ T5805] usb 4-1: Manufacturer: syz [ 913.416639][ T5805] usb 4-1: SerialNumber: syz [ 913.434603][ T5805] r8152-cfgselector 4-1: config 0 descriptor?? [ 913.493748][ T9] gspca_m5602: Failed to find a sensor [ 913.504036][ T9] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 913.532044][ T9] usb 1-1: USB disconnect, device number 51 [ 913.550727][ T5760] udevd[5760]: setting owner of /dev/bus/usb/001/051 to uid=0, gid=0 failed: No such file or directory [ 913.653350][T31676] comedi comedi4: bad chanlist[0]=0x032c0000 chan=0 range length=2 [ 913.768857][T31679] loop2: detected capacity change from 0 to 22 [ 913.779056][T31679] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 913.810629][T31679] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 913.869149][ T5805] r8152-cfgselector 4-1: Unknown version 0x0000 [ 913.883826][ T5805] r8152-cfgselector 4-1: USB disconnect, device number 46 [ 914.193787][T31691] netlink: 136 bytes leftover after parsing attributes in process `syz.2.11559'. [ 914.395447][T31702] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11562'. [ 914.446866][T31702] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 914.618935][T31710] loop2: detected capacity change from 0 to 1024 [ 914.672460][T31710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.799850][T31719] loop5: detected capacity change from 0 to 4096 [ 914.807217][T31710] EXT4-fs error (device loop2): __ext4_new_inode:1075: comm syz.2.11567: reserved inode found cleared - inode=18 [ 914.896083][T31719] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 914.946219][T31719] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 914.977541][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.987496][T31719] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 915.020004][T31719] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 915.093834][T31719] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 915.141338][T31719] ntfs: volume version 3.1. [ 915.191504][T31719] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 915.224632][T31719] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 915.271523][T31719] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 915.323972][T31719] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 915.356841][T31719] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 915.372572][T31708] loop3: detected capacity change from 0 to 32768 [ 915.401930][T31708] JBD2: Ignoring recovery information on journal [ 915.561269][T31708] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 915.877644][ T5767] ocfs2: Unmounting device (7,3) on (node local) [ 915.954394][T31745] netlink: 'syz.5.11583': attribute type 5 has an invalid length. [ 916.231841][T31756] smb3: Unexpected value for 'rdma' [ 916.272170][T31752] loop5: detected capacity change from 0 to 8192 [ 916.289155][T31752] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 916.333156][T31752] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 916.355943][T31752] REISERFS (device loop5): using ordered data mode [ 916.381272][T31752] reiserfs: using flush barriers [ 916.389158][T31752] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 916.405945][T31752] REISERFS (device loop5): checking transaction log (loop5) [ 916.415498][T31752] REISERFS (device loop5): Using tea hash to sort names [ 916.423019][T31752] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 916.689291][T31767] mac80211_hwsim hwsim8 : renamed from wlan0 [ 917.042183][T31782] netlink: 'syz.3.11600': attribute type 3 has an invalid length. [ 917.076478][T31782] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.11600'. [ 917.483702][T31803] kAFS: No cell specified [ 917.720957][T31812] loop3: detected capacity change from 0 to 2048 [ 917.793806][T31815] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 917.830746][T31812] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 917.846813][T31812] Remounting filesystem read-only [ 918.547138][T31696] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 918.786235][T31696] usb 3-1: Using ep0 maxpacket: 8 [ 918.796480][T31696] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.816390][T31696] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 918.835737][T31696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 918.845840][T31696] usb 3-1: SerialNumber: syz [ 918.877120][T31696] usb 3-1: config 0 descriptor?? [ 918.904803][T31696] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 918.935211][T31696] usb 3-1: Failed to create links for entity 255 [ 918.944238][T31696] usb 3-1: Failed to register entities (-22). [ 919.119483][T31696] usb 3-1: USB disconnect, device number 58 [ 919.166809][T31861] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 919.175982][T31861] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 919.342480][T31849] loop5: detected capacity change from 0 to 32768 [ 919.411185][T31849] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 919.527363][T31849] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 919.644386][T31849] XFS (loop5): Starting recovery (logdev: internal) [ 919.723741][T31849] XFS (loop5): Ending recovery (logdev: internal) [ 919.739010][T31849] XFS (loop5): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 919.755834][T31849] XFS (loop5): Failed to initialize disk quotas. [ 919.768548][T31886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11647'. [ 919.917612][T31849] XFS (loop5): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 920.041583][T23911] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 920.423359][T31906] netlink: 'syz.0.11658': attribute type 2 has an invalid length. [ 920.536221][T31908] @0: renamed from bond_slave_1 (while UP) [ 920.569019][T31912] x_tables: duplicate entry at hook 2 [ 920.611091][T31914] loop5: detected capacity change from 0 to 256 [ 920.719571][T31914] FAT-fs (loop5): Directory bread(block 64) failed [ 920.741259][T31914] FAT-fs (loop5): Directory bread(block 65) failed [ 920.757380][T31914] FAT-fs (loop5): Directory bread(block 66) failed [ 920.763954][T31914] FAT-fs (loop5): Directory bread(block 67) failed [ 920.785130][T31917] netlink: 10 bytes leftover after parsing attributes in process `syz.3.11663'. [ 920.788244][T31914] FAT-fs (loop5): Directory bread(block 68) failed [ 920.826162][T31914] FAT-fs (loop5): Directory bread(block 69) failed [ 920.847120][T31914] FAT-fs (loop5): Directory bread(block 70) failed [ 920.874115][T31914] FAT-fs (loop5): Directory bread(block 71) failed [ 920.884330][T31914] FAT-fs (loop5): Directory bread(block 72) failed [ 920.916293][T31914] FAT-fs (loop5): Directory bread(block 73) failed [ 921.694302][T31952] netlink: 'syz.2.11680': attribute type 32 has an invalid length. [ 921.983176][T31967] libceph: resolve '0' (ret=-3): failed [ 922.256839][T31977] loop5: detected capacity change from 0 to 2048 [ 922.293068][T31977] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 922.484116][T31985] loop3: detected capacity change from 0 to 64 [ 922.899101][T31998] loop3: detected capacity change from 0 to 4096 [ 922.921001][T31998] __ntfs_error: 6 callbacks suppressed [ 922.921018][T31998] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 922.977722][T31998] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 922.997490][T31998] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 923.036432][T31998] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 923.066907][T31998] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 923.098419][T31998] ntfs: volume version 3.1. [ 923.105931][T31998] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 923.136372][T31998] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 923.184178][T31998] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 923.225856][T31998] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 923.237873][ T5805] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 923.255888][T31998] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 923.428249][ T5805] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 923.438450][ T5805] usb 6-1: config 0 has no interface number 0 [ 923.444580][ T5805] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 923.496985][ T5805] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 923.516734][ T5805] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 923.545623][ T5805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.556529][T31696] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 923.575086][ T5805] usb 6-1: config 0 descriptor?? [ 923.597644][ T5805] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 923.637044][T32014] loop3: detected capacity change from 0 to 4096 [ 923.664141][T32014] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 923.693753][T32014] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 923.725532][T32017] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 923.751789][T31696] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 923.786093][T31696] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 923.816585][T31696] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 923.825423][T32001] iowarrior 6-1:0.1: Error -90 while submitting URB [ 923.833617][ T5805] usb 6-1: USB disconnect, device number 15 [ 923.845681][T31696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 923.860303][T31696] usb 3-1: SerialNumber: syz [ 924.091247][T31696] usb 3-1: 0:2 : does not exist [ 924.109697][T31696] usb 3-1: USB disconnect, device number 59 [ 924.149810][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 924.264631][T32031] overlayfs: conflicting options: metacopy=off,verity=on [ 924.906589][T32059] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11732'. [ 925.070963][T32067] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.11737'. [ 925.081195][T32063] loop5: detected capacity change from 0 to 4096 [ 925.321394][T32063] ntfs: volume version 3.1. [ 925.915156][T32100] tmpfs: Group quota block hardlimit too large. [ 926.706091][T31696] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 926.906813][T31696] usb 3-1: config index 0 descriptor too short (expected 61256, got 72) [ 926.915744][T31696] usb 3-1: config 1 has an invalid interface number: 0 but max is -1 [ 926.927619][T32144] loop5: detected capacity change from 0 to 512 [ 926.934642][T31696] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.951912][T31696] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 926.962207][T32144] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 926.982121][T31696] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 926.996179][T32144] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 927.026201][T31696] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 927.035622][T31696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 927.045527][T31696] usb 3-1: SerialNumber: syz [ 927.054661][T32144] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.11774: Invalid block bitmap block 0 in block_group 0 [ 927.073217][T31696] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 927.082565][T31696] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 927.089054][T32144] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 927.098553][T31696] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 927.137395][T32144] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.11774: attempt to clear invalid blocks 983261 len 1 [ 927.169891][T32144] EXT4-fs error (device loop5): __ext4_get_inode_loc:4489: comm syz.5.11774: Invalid inode table block 0 in block_group 0 [ 927.232486][T32144] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 927.257270][T32144] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 927.285413][T32144] EXT4-fs error (device loop5): __ext4_get_inode_loc:4489: comm syz.5.11774: Invalid inode table block 0 in block_group 0 [ 927.309634][T31696] usb 3-1: USB disconnect, device number 60 [ 927.344431][T32144] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 927.365363][T32144] EXT4-fs error (device loop5): ext4_truncate:4294: inode #11: comm syz.5.11774: mark_inode_dirty error [ 927.397364][T32144] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 927.416540][T32144] EXT4-fs error (device loop5): __ext4_get_inode_loc:4489: comm syz.5.11774: Invalid inode table block 0 in block_group 0 [ 927.450679][T32144] EXT4-fs (loop5): 1 truncate cleaned up [ 927.467555][T32144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 927.556186][T32144] EXT4-fs error (device loop5): __ext4_get_inode_loc:4489: comm syz.5.11774: Invalid inode table block 0 in block_group 0 [ 927.578621][T32144] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 927.660779][T23911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.076171][ T5805] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 928.253121][T32181] loop2: detected capacity change from 0 to 8 [ 928.273953][ T5805] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 928.291211][ T5805] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 928.301001][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.316445][ T5805] usb 6-1: Product: syz [ 928.322211][T32181] SQUASHFS error: zlib decompression failed, data probably corrupt [ 928.325357][ T5805] usb 6-1: Manufacturer: syz [ 928.336002][ T5805] usb 6-1: SerialNumber: syz [ 928.356439][ T5805] usb 6-1: config 0 descriptor?? [ 928.361987][T32181] SQUASHFS error: Failed to read block 0x4de: -5 [ 928.380486][T32181] SQUASHFS error: zlib decompression failed, data probably corrupt [ 928.398839][T32181] SQUASHFS error: Failed to read block 0x4df: -5 [ 928.425520][T32181] SQUASHFS error: zlib decompression failed, data probably corrupt [ 928.436742][ T5805] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 928.445009][T32181] SQUASHFS error: Failed to read block 0x4e0: -5 [ 928.460978][T32181] SQUASHFS error: zlib decompression failed, data probably corrupt [ 928.469490][T32181] SQUASHFS error: Failed to read block 0x4de: -5 [ 928.477908][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 928.477921][ T28] audit: type=1800 audit(2000000354.860:533): pid=32181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11791" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 928.533681][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 928.592431][ T966] usb 6-1: USB disconnect, device number 16 [ 928.733732][T32191] netlink: 'syz.2.11794': attribute type 10 has an invalid length. [ 928.753976][T32191] vlan0: entered allmulticast mode [ 928.764229][T32191] veth0_vlan: entered allmulticast mode [ 928.802168][T32191] team0: Port device vlan0 added [ 929.002035][T32201] bond0: (slave veth0_to_hsr): Device is not bonding slave [ 929.011832][T32201] bond0: option active_slave: invalid value (veth0_to_hsr) [ 929.068024][T32202] loop2: detected capacity change from 0 to 2048 [ 929.132113][T32202] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 929.261643][T32202] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 929.289623][T32202] UDF-fs: error (device loop2): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 929.460721][T32217] loop3: detected capacity change from 0 to 256 [ 929.491564][T32217] exfat: Deprecated parameter 'namecase' [ 929.507943][T32221] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 929.522807][T32217] exfat: Deprecated parameter 'namecase' [ 929.564084][T32217] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 929.915413][T32234] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11811'. [ 930.119045][T32242] loop5: detected capacity change from 0 to 764 [ 930.198767][T32242] rock: directory entry would overflow storage [ 930.205059][T32242] rock: sig=0x4654, size=5, remaining=4 [ 930.610884][T32264] netlink: 'syz.5.11827': attribute type 10 has an invalid length. [ 930.640845][T32264] vlan0: entered allmulticast mode [ 930.665692][T32264] veth0_vlan: entered allmulticast mode [ 930.750710][T32264] team0: Port device vlan0 added [ 931.062507][T32282] printk: syz.3.11836 (32282): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 931.199772][T32288] loop5: detected capacity change from 0 to 256 [ 931.351673][T32288] FAT-fs (loop5): Directory bread(block 64) failed [ 931.373931][T32288] FAT-fs (loop5): Directory bread(block 65) failed [ 931.381698][T32288] FAT-fs (loop5): Directory bread(block 66) failed [ 931.388648][T32288] FAT-fs (loop5): Directory bread(block 67) failed [ 931.395346][T32288] FAT-fs (loop5): Directory bread(block 68) failed [ 931.415858][T32288] FAT-fs (loop5): Directory bread(block 69) failed [ 931.415973][T32288] FAT-fs (loop5): Directory bread(block 70) failed [ 931.416197][T32288] FAT-fs (loop5): Directory bread(block 71) failed [ 931.416286][T32288] FAT-fs (loop5): Directory bread(block 72) failed [ 931.416310][T32288] FAT-fs (loop5): Directory bread(block 73) failed [ 931.476589][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.845760][T32304] loop2: detected capacity change from 0 to 4096 [ 931.865813][T32302] loop5: detected capacity change from 0 to 2048 [ 931.882473][T32304] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 931.941915][T32302] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 932.026162][T32304] ntfs3: loop2: failed to convert "c46c" to cp864 [ 932.738129][ T5805] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 932.980029][ T5805] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 933.002951][ T5805] usb 1-1: config 0 has no interface number 0 [ 933.012970][ T5805] usb 1-1: config 0 interface 110 has no altsetting 0 [ 933.031657][ T5805] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 933.046669][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.054690][ T5805] usb 1-1: Product: syz [ 933.076089][ T5805] usb 1-1: Manufacturer: syz [ 933.080748][ T5805] usb 1-1: SerialNumber: syz [ 933.098167][ T5805] usb 1-1: config 0 descriptor?? [ 933.327437][ T5805] cdc_subset: probe of 1-1:0.110 failed with error -22 [ 933.578572][ T5805] usb 1-1: USB disconnect, device number 52 [ 933.865010][T32383] loop2: detected capacity change from 0 to 512 [ 933.878708][T32383] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 933.894145][T32383] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 933.953703][T32382] loop5: detected capacity change from 0 to 4096 [ 933.960579][T32383] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.11884: Invalid block bitmap block 0 in block_group 0 [ 934.041111][T32383] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 934.066948][T32383] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.11884: attempt to clear invalid blocks 983261 len 1 [ 934.090523][T32383] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.11884: Invalid inode table block 0 in block_group 0 [ 934.125359][T32383] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 934.177889][T32383] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 934.216398][T32383] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.11884: Invalid inode table block 0 in block_group 0 [ 934.256727][T32383] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 934.294233][T32383] EXT4-fs error (device loop2): ext4_truncate:4294: inode #11: comm syz.2.11884: mark_inode_dirty error [ 934.323862][T32392] netlink: 180 bytes leftover after parsing attributes in process `syz.3.11887'. [ 934.343138][T32383] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 934.364125][T32383] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.11884: Invalid inode table block 0 in block_group 0 [ 934.398092][T32383] EXT4-fs (loop2): 1 truncate cleaned up [ 934.437326][T32383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 934.520371][T32383] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.11884: Invalid inode table block 0 in block_group 0 [ 934.571678][T32383] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 934.711706][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.881425][T32410] loop3: detected capacity change from 0 to 1764 [ 934.963104][T32410] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 935.328863][T32425] xt_hashlimit: overflow, try lower: 3/0 [ 936.129561][T32464] loop5: detected capacity change from 0 to 16 [ 936.151776][T32464] erofs: (device loop5): mounted with root inode @ nid 36. [ 936.193342][T32467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11925'. [ 936.237444][T32467] netlink: 312 bytes leftover after parsing attributes in process `syz.2.11925'. [ 936.247325][T32464] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 936.266258][T32467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11925'. [ 936.298566][T32464] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 936.809342][T32487] bond0: up delay (59142) is not a multiple of miimon (100), value rounded to 59100 ms [ 936.843314][T32487] bond0: entered promiscuous mode [ 936.851301][T32487] bond0: entered allmulticast mode [ 936.863530][T32487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.946275][ T5805] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 937.151099][T32475] loop5: detected capacity change from 0 to 32768 [ 937.158312][ T5805] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 937.176261][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 937.194509][ T5805] usb 1-1: Product: syz [ 937.201446][T32475] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 937.204714][ T5805] usb 1-1: SerialNumber: syz [ 937.228287][ T5805] usb 1-1: config 0 descriptor?? [ 937.395052][T32505] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 937.407603][T32506] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 1 [ 937.418679][T32507] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 2 [ 937.435120][T23911] ocfs2: Unmounting device (7,5) on (node local) [ 937.443805][T32508] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 3 [ 937.447864][T32509] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 4 [ 937.468844][T32511] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 6 [ 937.475643][T32510] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 5 [ 937.506481][T32512] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 7 [ 937.518804][ T5805] hso 1-1:0.0: Failed to find BULK IN ep [ 937.759739][ T966] usb 1-1: USB disconnect, device number 53 [ 937.950308][T32524] loop2: detected capacity change from 0 to 2048 [ 938.029374][T32527] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 938.136738][T32524] NILFS (loop2): error -2 truncating bmap (ino=16) [ 938.371964][T32537] loop5: detected capacity change from 0 to 512 [ 938.405820][T32537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 938.446130][T32537] EXT4-fs (loop5): filesystem is read-only [ 938.469445][T32537] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 938.526924][T32537] EXT4-fs (loop5): filesystem is read-only [ 938.532802][T32537] EXT4-fs (loop5): orphan cleanup on readonly fs [ 938.617611][T32537] EXT4-fs error (device loop5): ext4_orphan_get:1398: inode #16: comm syz.5.11954: iget: bad i_size value: 648518346341360424 [ 938.665450][T32537] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.11954: couldn't read orphan inode 16 (err -117) [ 938.726289][T32554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11962'. [ 938.740146][T32537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 938.930337][T23911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.670499][T32591] netlink: 22 bytes leftover after parsing attributes in process `syz.5.11980'. [ 939.941901][T32599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11984'. [ 940.004554][T32599] veth5: entered allmulticast mode [ 940.294406][T32611] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11990'. [ 940.346303][T32611] openvswitch: netlink: Key type 29 is not supported [ 940.806344][T32604] loop3: detected capacity change from 0 to 32768 [ 940.834544][T32628] loop2: detected capacity change from 0 to 1764 [ 940.860020][T32604] find_entry called with index >= next_index [ 940.884090][T32604] find_entry called with index >= next_index [ 940.906209][T32604] find_entry called with index >= next_index [ 940.939167][T32604] find_entry called with index >= next_index [ 940.945187][T32604] find_entry called with index >= next_index [ 942.213020][T32677] loop2: detected capacity change from 0 to 8 [ 942.227200][T32677] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 942.280199][ T5760] udevd[5760]: incorrect cramfs checksum on /dev/loop2 [ 942.318981][T32677] cramfs: Error -5 while decompressing! [ 942.329612][ T8] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 942.346257][T32677] cramfs: ffffffff973f7368(26)->ffff8880581ad000(4096) [ 942.373890][T32677] cramfs: Error -3 while decompressing! [ 942.379373][ T5760] udevd[5760]: incorrect cramfs checksum on /dev/loop2 [ 942.396446][T32677] cramfs: ffffffff973f7382(26)->ffff88804da78000(4096) [ 942.426078][T32677] cramfs: Error -3 while decompressing! [ 942.446296][T32677] cramfs: ffffffff973f739c(16)->ffff88804fa19000(4096) [ 942.465047][T32677] cramfs: Error -5 while decompressing! [ 942.491829][T32677] cramfs: ffffffff973f7368(26)->ffff8880581ad000(4096) [ 942.566452][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 942.573609][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.616216][ T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 942.638253][ T8] usb 6-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 942.686055][ T8] usb 6-1: config 0 interface 0 has no altsetting 1 [ 942.710268][ T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 942.743888][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.772996][ T8] usb 6-1: Product: syz [ 942.786350][ T8] usb 6-1: Manufacturer: syz [ 942.801241][ T8] usb 6-1: SerialNumber: syz [ 942.826304][ T8] usb 6-1: config 0 descriptor?? [ 942.920381][T32691] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12030'. [ 942.941320][T32691] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12030'. [ 943.250267][ T8] usb 6-1: USB disconnect, device number 17 [ 943.350285][T32685] loop3: detected capacity change from 0 to 32768 [ 943.376681][T32685] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.12027 (32685) [ 943.401300][T32685] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 943.430105][T32685] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 943.444070][T32685] BTRFS info (device loop3): turning on flush-on-commit [ 943.453964][T32685] BTRFS info (device loop3): enabling disk space caching [ 943.462910][T32685] BTRFS info (device loop3): disabling tree log [ 943.472559][T32685] BTRFS info (device loop3): enabling ssd optimizations [ 943.487333][T32685] BTRFS info (device loop3): enabling auto defrag [ 943.495892][T32685] BTRFS info (device loop3): force clearing of disk cache [ 943.508023][T32685] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 943.526460][T32685] BTRFS info (device loop3): use zstd compression, level 3 [ 943.543080][T32685] BTRFS info (device loop3): turning off barriers [ 943.577661][T32685] BTRFS info (device loop3): max_inline at 0 [ 943.597544][T32685] BTRFS info (device loop3): disk space caching is enabled [ 943.753159][T32685] BTRFS info (device loop3): auto enabling async discard [ 943.788930][T32685] BTRFS info (device loop3): rebuilding free space tree [ 943.866791][T32685] BTRFS info (device loop3): disabling free space tree [ 943.894154][T32685] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 943.919490][T32685] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 943.944107][T32685] BTRFS info (device loop3): checking UUID tree [ 944.049319][T32685] BTRFS info (device loop3: state M): force clearing of disk cache [ 944.064648][T32685] BTRFS info (device loop3: state M): max_inline at 0 [ 944.214956][ T5767] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 944.241506][T32737] loop5: detected capacity change from 0 to 2048 [ 944.330241][T32737] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 944.446196][ T28] audit: type=1800 audit(2000000370.803:534): pid=32737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.12044" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 944.516519][T32745] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12046'. [ 944.537934][T32746] loop2: detected capacity change from 0 to 256 [ 944.584987][T32746] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 945.010589][T32759] loop5: detected capacity change from 0 to 1764 [ 945.158705][T32765] kernel read not supported for file / N7âW)s!Qfsl{Tr)rO2:">͟v|ղDvc֠6xc: (pid: 32765 comm: syz.0.12057) [ 945.226541][ T28] audit: type=1800 audit(2000000371.603:535): pid=32765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12057" name=20019C4EFC1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C03E95CD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=89938 res=0 errno=0 [ 945.258827][ C1] vkms_vblank_simulate: vblank timer overrun [ 945.835763][ T327] loop5: detected capacity change from 0 to 256 [ 945.936235][ T327] FAT-fs (loop5): Directory bread(block 64) failed [ 945.976219][ T327] FAT-fs (loop5): Directory bread(block 65) failed [ 945.982900][ T327] FAT-fs (loop5): Directory bread(block 66) failed [ 946.017585][ T327] FAT-fs (loop5): Directory bread(block 67) failed [ 946.037625][ T327] FAT-fs (loop5): Directory bread(block 68) failed [ 946.044471][ T327] FAT-fs (loop5): Directory bread(block 69) failed [ 946.065287][ T332] netlink: 'syz.2.12073': attribute type 24 has an invalid length. [ 946.102800][ T327] FAT-fs (loop5): Directory bread(block 70) failed [ 946.124919][ T327] FAT-fs (loop5): Directory bread(block 71) failed [ 946.135142][ T327] FAT-fs (loop5): Directory bread(block 72) failed [ 946.158586][ T28] audit: type=1326 audit(2000000372.543:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=335 comm="syz.0.12075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 946.185013][ T327] FAT-fs (loop5): Directory bread(block 73) failed [ 946.228014][ T28] audit: type=1326 audit(2000000372.563:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=335 comm="syz.0.12075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 946.306251][ T28] audit: type=1326 audit(2000000372.573:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=335 comm="syz.0.12075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 946.373615][ T28] audit: type=1326 audit(2000000372.573:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=335 comm="syz.0.12075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 946.456315][ T28] audit: type=1326 audit(2000000372.573:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=335 comm="syz.0.12075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 946.775666][ T355] netlink: 'syz.2.12084': attribute type 21 has an invalid length. [ 946.816313][ T355] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12084'. [ 946.842704][ T355] netlink: 'syz.2.12084': attribute type 4 has an invalid length. [ 946.876279][ T355] netlink: 'syz.2.12084': attribute type 5 has an invalid length. [ 946.898941][ T355] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12084'. [ 946.928887][ T362] loop3: detected capacity change from 0 to 64 [ 947.104800][ T366] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12089'. [ 947.427149][ T383] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 947.744588][ T396] loop3: detected capacity change from 0 to 2048 [ 947.791711][ T396] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=66359, location=66359 [ 947.805906][ T396] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 947.877405][ T402] binder: 401:402 ioctl c0306201 200000000240 returned -14 [ 948.232518][ T412] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12112'. [ 949.155018][ T452] netlink: 'syz.2.12132': attribute type 5 has an invalid length. [ 949.364460][ T428] loop5: detected capacity change from 0 to 32768 [ 949.451092][ T428] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 949.575417][ T27] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 949.696507][ T428] XFS (loop5): Ending clean mount [ 949.799301][T23911] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 949.829154][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 949.844534][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 949.888432][ T27] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 949.934158][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.965508][ T27] usb 4-1: config 0 descriptor?? [ 950.233035][ T27] ath6kl: Failed to submit usb control message: -71 [ 950.245921][ T27] ath6kl: unable to send the bmi data to the device: -71 [ 950.281977][ T27] ath6kl: Unable to send get target info: -71 [ 950.299603][ T27] ath6kl: Failed to init ath6kl core: -71 [ 950.328508][ T27] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 950.353946][ T27] usb 4-1: USB disconnect, device number 47 [ 950.512656][ T505] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12154'. [ 951.083163][ T529] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12166'. [ 951.147985][ T28] audit: type=1326 audit(2000000377.533:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=531 comm="syz.2.12167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f79aeb9 code=0x7ffc0000 [ 951.224892][ T28] audit: type=1326 audit(2000000377.533:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=531 comm="syz.2.12167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f79aeb9 code=0x7ffc0000 [ 951.313775][ T28] audit: type=1326 audit(2000000377.563:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=531 comm="syz.2.12167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fbe3f79aeb9 code=0x7ffc0000 [ 951.343512][ T541] --map-set only usable from mangle table [ 951.376151][ T28] audit: type=1326 audit(2000000377.563:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=531 comm="syz.2.12167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f79aeb9 code=0x7ffc0000 [ 951.402227][ T543] loop2: detected capacity change from 0 to 256 [ 951.475029][ T28] audit: type=1326 audit(2000000377.563:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=531 comm="syz.2.12167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3f79aeb9 code=0x7ffc0000 [ 951.574375][ T547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12175'. [ 951.593339][ T549] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12177'. [ 951.604059][ T5760] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 951.639648][ T543] nfs4: Unknown parameter 'fscontext' [ 951.895468][ T559] netlink: 'syz.2.12181': attribute type 1 has an invalid length. [ 951.942771][ T559] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12181'. [ 951.968581][ T563] tc_dump_action: action bad kind [ 952.246726][ T8] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 952.430137][ T8] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 952.450944][ T8] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 952.474147][ T8] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 952.497335][ T28] audit: type=1326 audit(2000000378.883:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=584 comm="syz.0.12194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 952.535801][ T8] usb 6-1: config 220 has no interface number 2 [ 952.553118][ T8] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 952.576333][ T28] audit: type=1326 audit(2000000378.883:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=584 comm="syz.0.12194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 952.599223][ T8] usb 6-1: config 220 interface 0 has no altsetting 0 [ 952.624302][ T8] usb 6-1: config 220 interface 76 has no altsetting 0 [ 952.646608][ T8] usb 6-1: config 220 interface 1 has no altsetting 0 [ 952.656886][ T28] audit: type=1326 audit(2000000378.913:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=584 comm="syz.0.12194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 952.698967][ T8] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 952.708256][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.734557][ T28] audit: type=1326 audit(2000000378.913:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=584 comm="syz.0.12194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee0b9aeb9 code=0x7ffc0000 [ 952.758207][ T8] usb 6-1: Product: syz [ 952.763124][ T8] usb 6-1: Manufacturer: syz [ 952.768067][ T8] usb 6-1: SerialNumber: syz [ 952.993164][ T8] usb 6-1: selecting invalid altsetting 0 [ 953.010057][ T8] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 953.025231][ T8] usb 6-1: No valid video chain found. [ 953.097816][ T8] usb 6-1: selecting invalid altsetting 0 [ 953.103633][ T8] usbtest: probe of 6-1:220.1 failed with error -22 [ 953.136433][ T8] usb 6-1: USB disconnect, device number 18 [ 953.187929][ T601] loop2: detected capacity change from 0 to 512 [ 953.288367][ T601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.355538][ T601] ext4 filesystem being mounted at /3121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 953.472027][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.779559][ T613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12207'. [ 953.968580][ T625] random: crng reseeded on system resumption [ 954.314665][ T637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12219'. [ 954.958922][ T661] netlink: 64 bytes leftover after parsing attributes in process `syz.5.12230'. [ 955.224560][ T668] netlink: 'syz.5.12233': attribute type 1 has an invalid length. [ 956.406599][ T712] netlink: 'syz.2.12256': attribute type 10 has an invalid length. [ 956.423347][ T687] loop5: detected capacity change from 0 to 32768 [ 956.436327][ T712] veth1_vlan: entered allmulticast mode [ 956.473959][ T712] team0: Device veth1_vlan failed to register rx_handler [ 956.507273][ T687] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.12243 (687) [ 956.563047][ T11] infiniband syz2: set down [ 956.601818][ T687] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 956.626185][ T687] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 956.656306][ T687] BTRFS info (device loop5): force zlib compression, level 3 [ 956.663853][ T687] BTRFS info (device loop5): force clearing of disk cache [ 956.694028][ T687] BTRFS info (device loop5): setting nodatasum [ 956.715367][ T687] BTRFS info (device loop5): allowing degraded mounts [ 956.736838][ T687] BTRFS info (device loop5): enabling disk space caching [ 956.743957][ T687] BTRFS info (device loop5): disk space caching is enabled [ 956.974736][ T687] BTRFS info (device loop5): auto enabling async discard [ 957.002686][ T687] BTRFS info (device loop5): rebuilding free space tree [ 957.071417][ T687] BTRFS info (device loop5): disabling free space tree [ 957.099104][ T687] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 957.123298][ T739] loop2: detected capacity change from 0 to 2048 [ 957.139927][ T687] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 957.164873][ T739] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 957.237059][ T713] loop3: detected capacity change from 0 to 32768 [ 957.344940][ T687] BTRFS info (device loop5): balance: start -sconvert=raid0,soft,usage=10625749090306,limit=51539609600 [ 957.364202][ T713] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 957.367974][ T687] BTRFS info (device loop5): balance: ended with status: 0 [ 957.466354][ T745] netlink: 'syz.2.12263': attribute type 32 has an invalid length. [ 957.478952][ T713] (syz.3.12255,713,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 957.548415][ T747] xt_TPROXY: Can be used only with -p tcp or -p udp [ 957.562861][ T713] (syz.3.12255,713,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 957.576424][ T713] (syz.3.12255,713,0):ocfs2_mknod:298 ERROR: status = -2 [ 957.593276][ T713] (syz.3.12255,713,0):ocfs2_mknod:502 ERROR: status = -2 [ 957.622842][ T713] (syz.3.12255,713,0):ocfs2_create:676 ERROR: status = -2 [ 957.623124][T23911] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 957.913088][ T5767] ocfs2: Unmounting device (7,3) on (node local) [ 957.970728][ T754] netlink: 'syz.5.12265': attribute type 7 has an invalid length. [ 958.230553][ T761] loop2: detected capacity change from 0 to 16 [ 958.276530][ T761] erofs: (device loop2): mounted with root inode @ nid 36. [ 958.336635][ T761] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 958.386263][ T761] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 958.416342][ T761] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 958.446672][ T761] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 958.476797][ T761] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 958.506187][ T761] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 958.555031][ T761] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 958.626392][ T761] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 958.666239][ T761] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 958.683581][ T761] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 958.720102][ T761] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 958.742175][ T28] audit: type=1326 audit(2000000385.113:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=771 comm=162E44A480DB682108B49543019E91 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd50039aeb9 code=0x0 [ 958.799976][ T761] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 958.832730][ T28] audit: type=1800 audit(2000000385.213:551): pid=761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12270" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 959.850282][ T811] loop3: detected capacity change from 0 to 4096 [ 959.862382][ T811] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 959.972023][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 960.060288][ T811] ntfs3: loop3: failed to convert "c46c" to cp862 [ 960.160712][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 960.180495][ T9] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 960.196237][ T9] usb 3-1: config 254 has no interface number 0 [ 960.206828][ T9] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 960.241097][ T9] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 960.270953][ T9] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 960.295574][ T9] usb 3-1: config 254 interface 235 has no altsetting 0 [ 960.338231][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 960.357663][ T9] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 960.365880][ T9] usb 3-1: Product: syz [ 960.411116][ T9] usb 3-1: Manufacturer: syz [ 960.415774][ T9] usb 3-1: SerialNumber: syz [ 960.451683][ T809] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 960.683896][ T809] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 960.719217][ T9] usbtest 3-1:254.235: Linux gadget zero [ 960.724924][ T9] usbtest 3-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 960.941592][ T27] usb 3-1: USB disconnect, device number 61 [ 961.049064][ T855] netlink: 'syz.3.12315': attribute type 10 has an invalid length. [ 961.073271][ T855] veth1_vlan: entered allmulticast mode [ 961.124933][ T855] team0: Device veth1_vlan failed to register rx_handler [ 961.642433][ T879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12328'. [ 961.826341][ T5805] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 961.906163][ T27] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 961.986104][T28757] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 962.016353][ T5805] usb 3-1: Using ep0 maxpacket: 16 [ 962.033510][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 962.058133][ T5805] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 962.076117][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.085015][ T5805] usb 3-1: Product: syz [ 962.094672][ T5805] usb 3-1: Manufacturer: syz [ 962.096471][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 962.105660][ T5805] usb 3-1: SerialNumber: syz [ 962.117578][ T5805] usb 3-1: config 0 descriptor?? [ 962.118550][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 962.129491][ T5805] hub 3-1:0.0: bad descriptor, ignoring hub [ 962.140390][ T5805] hub: probe of 3-1:0.0 failed with error -5 [ 962.150152][ T5805] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input36 [ 962.170304][ T27] usb 6-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 962.186062][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.218166][ T27] usb 6-1: config 0 descriptor?? [ 962.227814][T28757] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 962.252253][T28757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.278286][T28757] usb 4-1: Product: syz [ 962.282598][T28757] usb 4-1: Manufacturer: syz [ 962.287954][T28757] usb 4-1: SerialNumber: syz [ 962.298558][T28757] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 962.328875][T31696] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 962.434041][ T27] usb 6-1: string descriptor 0 read error: -71 [ 962.446730][ T27] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input37 [ 962.473718][ T5121] bcm5974 6-1:0.0: could not read from device [ 962.517578][ T5121] bcm5974 6-1:0.0: could not read from device [ 962.553346][ T5121] bcm5974 6-1:0.0: could not read from device [ 962.571325][ T5121] bcm5974 6-1:0.0: could not read from device [ 962.719687][ T27] bcm5974 6-1:0.0: could not read from device [ 962.750419][ T27] input: failed to attach handler mousedev to device input37, error: -5 [ 962.807673][ T27] usb 6-1: USB disconnect, device number 19 [ 962.833015][T28757] usb 4-1: USB disconnect, device number 48 [ 963.143016][ T902] loop5: detected capacity change from 0 to 8192 [ 963.190153][ T902] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 963.234245][ T902] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 963.262690][ T902] FAT-fs (loop5): Filesystem has been set read-only [ 963.367400][T31696] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 963.406985][T31696] ath9k_htc: Failed to initialize the device [ 963.426140][T28757] usb 4-1: ath9k_htc: USB layer deinitialized [ 963.529506][ T920] comedi comedi2: aio_aio12_8: I/O port conflict (0x4000cf5,32) [ 964.507881][ T968] loop2: detected capacity change from 0 to 8192 [ 964.537039][ T968] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 964.567779][ T968] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 964.577719][ T968] REISERFS (device loop2): using ordered data mode [ 964.584276][ T968] reiserfs: using flush barriers [ 964.630028][ T971] loop3: detected capacity change from 0 to 4096 [ 964.651677][ T968] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 964.736975][ T968] REISERFS (device loop2): checking transaction log (loop2) [ 964.756157][ T981] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 964.778044][ T968] REISERFS (device loop2): Using r5 hash to sort names [ 964.854627][ T971] syz.3.12366: attempt to access beyond end of device [ 964.854627][ T971] loop3: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 964.867186][ T968] reiserfs: enabling write barrier flush mode [ 964.906988][ T971] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 964.917132][ T968] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 964.946714][ T982] loop5: detected capacity change from 0 to 4096 [ 965.013012][ T968] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 965.063084][ T968] REISERFS (device loop2): Remounting filesystem read-only [ 965.093976][ T968] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 965.141268][ T982] ntfs3: loop5: ino=5, "/" directory corrupted [ 965.156560][ T982] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 965.166161][ T968] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 965.216464][ T968] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 965.244556][ T968] REISERFS error (device loop2): zam-7001 reiserfs_find_entry: io error [ 965.274606][ T968] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 965.340893][ T968] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 965.373694][ T968] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 965.425348][ T968] REISERFS warning (device loop2): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 965.583484][ T5765] ------------[ cut here ]------------ [ 965.589215][ T5765] kernel BUG at fs/reiserfs/journal.c:1916! [ 965.615121][ T5765] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 965.621236][ T5765] CPU: 0 PID: 5765 Comm: syz-executor Not tainted syzkaller #0 [ 965.628796][ T5765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 965.638852][ T5765] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 965.644678][ T5765] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 64 e0 b5 ff e9 f9 fc ff ff e8 2a b9 5d ff <0f> 0b e8 23 b9 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 965.664288][ T5765] RSP: 0000:ffffc900045efb00 EFLAGS: 00010293 [ 965.670363][ T5765] RAX: ffffffff822959f6 RBX: 1ffff920008bdf64 RCX: ffff888021510000 [ 965.678336][ T5765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 965.686306][ T5765] RBP: ffffc900045efbf8 R08: ffffc900045efb77 R09: 0000000000000000 [ 965.694278][ T5765] R10: ffffc900045efb40 R11: fffff520008bdf6f R12: ffffc90010509000 [ 965.702255][ T5765] R13: dffffc0000000000 R14: ffff888026852630 R15: 0000000000000000 [ 965.710232][ T5765] FS: 0000555581dd5500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 965.719165][ T5765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 965.725748][ T5765] CR2: 00007fd4f6999000 CR3: 000000006268e000 CR4: 00000000003506f0 [ 965.733723][ T5765] Call Trace: [ 965.737004][ T5765] [ 965.739941][ T5765] ? journal_release+0x30/0x30 [ 965.744734][ T5765] journal_release+0x1f/0x30 [ 965.749345][ T5765] reiserfs_put_super+0x26b/0x510 [ 965.754384][ T5765] ? hook_inode_free_security+0xb0/0xb0 [ 965.759954][ T5765] ? evict_inodes+0x63c/0x6a0 [ 965.764649][ T5765] ? reiserfs_dirty_inode+0x270/0x270 [ 965.770038][ T5765] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 965.775686][ T5765] ? reiserfs_dirty_inode+0x270/0x270 [ 965.781070][ T5765] generic_shutdown_super+0x134/0x2b0 [ 965.786459][ T5765] kill_block_super+0x44/0x90 [ 965.791145][ T5765] deactivate_locked_super+0x97/0x100 [ 965.796527][ T5765] cleanup_mnt+0x43b/0x4d0 [ 965.800962][ T5765] task_work_run+0x1d4/0x260 [ 965.805582][ T5765] ? task_work_cancel+0x220/0x220 [ 965.810644][ T5765] ? exit_to_user_mode_loop+0x3b/0x110 [ 965.816125][ T5765] exit_to_user_mode_loop+0xe6/0x110 [ 965.821428][ T5765] exit_to_user_mode_prepare+0xee/0x180 [ 965.827003][ T5765] syscall_exit_to_user_mode+0x1a/0x50 [ 965.832483][ T5765] do_syscall_64+0x61/0xa0 [ 965.836918][ T5765] ? clear_bhb_loop+0x40/0x90 [ 965.841606][ T5765] ? clear_bhb_loop+0x40/0x90 [ 965.846300][ T5765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 965.852196][ T5765] RIP: 0033:0x7fbe3f79c117 [ 965.856615][ T5765] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 965.876234][ T5765] RSP: 002b:00007ffff5156ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 965.884655][ T5765] RAX: 0000000000000000 RBX: 00007fbe3f80471f RCX: 00007fbe3f79c117 [ 965.892640][ T5765] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff5156f90 [ 965.900611][ T5765] RBP: 00007ffff5156f90 R08: 00007ffff5157f90 R09: 00000000ffffffff [ 965.908596][ T5765] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff5158020 [ 965.916580][ T5765] R13: 00007fbe3f80471f R14: 00000000000ebb54 R15: 00007ffff5158060 [ 965.924572][ T5765] [ 965.927612][ T5765] Modules linked in: [ 965.937590][ T5765] ---[ end trace 0000000000000000 ]--- [ 965.956062][ T5765] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 965.968586][ T5765] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 64 e0 b5 ff e9 f9 fc ff ff e8 2a b9 5d ff <0f> 0b e8 23 b9 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 966.006849][ T5765] RSP: 0000:ffffc900045efb00 EFLAGS: 00010293 [ 966.018679][ T5765] RAX: ffffffff822959f6 RBX: 1ffff920008bdf64 RCX: ffff888021510000 [ 966.032446][ T5765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 966.042168][ T5765] RBP: ffffc900045efbf8 R08: ffffc900045efb77 R09: 0000000000000000 [ 966.051820][ T5765] R10: ffffc900045efb40 R11: fffff520008bdf6f R12: ffffc90010509000 [ 966.060532][ T5765] R13: dffffc0000000000 R14: ffff888026852630 R15: 0000000000000000 [ 966.077290][ T5765] FS: 0000555581dd5500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 966.086778][ T5765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.093438][ T5765] CR2: 00005555596d6a28 CR3: 000000006268e000 CR4: 00000000003506f0 [ 966.102147][ T5765] Kernel panic - not syncing: Fatal exception [ 966.108786][ T5765] Kernel Offset: disabled [ 966.113109][ T5765] Rebooting in 86400 seconds..