last executing test programs: 2.04081583s ago: executing program 2 (id=10747): r0 = fsopen(&(0x7f0000000040)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='acl', &(0x7f0000001840)=']', 0x1) 1.812954335s ago: executing program 2 (id=10751): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x44, 0x1, 0x3, "b49e1b62251dd37bb50730df4749af087c17e6e724ae01b9424f5ab23870ecd4"}) 1.706824196s ago: executing program 0 (id=10753): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x101, @mcast2, 0x9}, 0x1c) 1.663563287s ago: executing program 2 (id=10754): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 1.553878639s ago: executing program 0 (id=10756): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}}], 0x1, 0x4000000) 1.363698363s ago: executing program 2 (id=10758): r0 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) 1.290985654s ago: executing program 1 (id=10759): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x66f, @remote, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000002900000032"], 0x18}}], 0x1, 0x4000010) 1.215046486s ago: executing program 0 (id=10760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 1.175668147s ago: executing program 3 (id=10761): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x29, 0x5, 0x0, 0x0) 1.174413067s ago: executing program 2 (id=10762): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 1.109065938s ago: executing program 1 (id=10763): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x200000, &(0x7f0000000240)={[{@nr_blocks={'nr_blocks', 0x3d, [0x1e]}}]}) 989.33525ms ago: executing program 0 (id=10764): r0 = socket(0xa, 0x3, 0x87) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x4}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f00000005c0)="72d6", 0x2}], 0x2}, 0x0) 988.77762ms ago: executing program 3 (id=10765): r0 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000000)=0x1) 834.901554ms ago: executing program 0 (id=10766): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x0, 0x42474752, 0x780, 0xffff8000, 0x2, @stepwise={{0x1, 0x2}, {0x80, 0x5}, {0x3, 0xc433}}}) 834.549024ms ago: executing program 1 (id=10767): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a80)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3, 0x0, 0x2b}, 0x9c) 822.854234ms ago: executing program 3 (id=10768): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000018c0)={[{@dmask={'dmask', 0x3d, 0x7}}, {@uid={'uid', 0x3d, 0xee00}}, {@time_offset={'time_offset', 0x3d, 0x2}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@keep_last_dots}, {@umask={'umask', 0x3d, 0x3ff}}, {@dmask}]}, 0x1, 0x152d, &(0x7f0000000380)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 716.974936ms ago: executing program 1 (id=10769): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) pidfd_send_signal(r0, 0x24c, &(0x7f0000000200)={0x24c, 0x20f369, 0x5}, 0x0) 586.607308ms ago: executing program 0 (id=10770): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000002540)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x518, &(0x7f0000006c40)="$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") lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 477.26265ms ago: executing program 1 (id=10771): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 364.053653ms ago: executing program 1 (id=10772): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000009c0)='./bus\x00', 0x2008002, &(0x7f0000000000)=ANY=[], 0x1, 0x6024, &(0x7f0000006b00)="$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") symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 283.461485ms ago: executing program 3 (id=10773): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 165.343837ms ago: executing program 3 (id=10774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 67.769709ms ago: executing program 3 (id=10775): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3004009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000000), 0x8, &(0x7f0000000240)={[{@uuid_on}, {@metacopy_on}, {@verity_on}]}) 0s ago: executing program 2 (id=10776): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) kernel console output (not intermixed with test programs): ite [ 1214.911337][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1214.964294][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1214.989767][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.003846][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.024688][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.035820][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.093006][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.101583][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.132313][T26533] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1215.158188][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.178411][T26533] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1215.189275][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.208625][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.223554][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.244879][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.258080][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.269295][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.280155][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.289252][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.298303][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.307389][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.316095][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.325612][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.334924][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.344615][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.358477][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.367571][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.376667][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.389149][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.398894][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.407858][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.416977][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.430307][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.440025][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.461418][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.477938][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.488890][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.509788][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.518513][ T6002] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1215.528748][T26559] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1215.574413][ T28] audit: type=1800 audit(2000000038.152:91): pid=26559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9046" name="file1" dev="loop1" ino=1048634 res=0 errno=0 [ 1215.594533][ C0] vkms_vblank_simulate: vblank timer overrun [ 1215.716341][ T6002] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.737196][ T6002] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1215.766777][ T6002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.810755][ T6002] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1215.852365][T26572] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9053'. [ 1216.266363][T26572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1216.289533][T26572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1216.313154][T26572] bond0 (unregistering): Released all slaves [ 1216.547865][ T28] audit: type=1326 audit(2000000039.059:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26579 comm="syz.3.9056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1216.619934][ T28] audit: type=1326 audit(2000000039.077:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26579 comm="syz.3.9056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1216.620676][T26582] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1216.692650][ T28] audit: type=1326 audit(2000000039.087:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26579 comm="syz.3.9056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1216.718243][ T28] audit: type=1326 audit(2000000039.087:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26579 comm="syz.3.9056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1216.741719][ T28] audit: type=1326 audit(2000000039.087:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26579 comm="syz.3.9056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1216.909901][T26586] loop3: detected capacity change from 0 to 8192 [ 1216.926606][T26586] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1216.941041][T26586] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1216.951409][T26586] REISERFS (device loop3): using ordered data mode [ 1216.958407][T26586] reiserfs: using flush barriers [ 1216.980275][T26586] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1217.011263][T26586] REISERFS (device loop3): checking transaction log (loop3) [ 1217.024309][T26586] REISERFS (device loop3): Using r5 hash to sort names [ 1217.032226][ T6002] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1217.032236][T26586] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1217.055999][T26586] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1217.248573][ T6002] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1217.282892][ T6002] stv0680 3-1:4.0: last error: 242, command = 0x24 [ 1217.324748][ T6002] usb 3-1: USB disconnect, device number 13 [ 1217.423118][T26600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9066'. [ 1217.452651][T26600] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1217.467939][T26600] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1217.611789][T26603] loop1: detected capacity change from 0 to 512 [ 1217.638988][T26603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1217.697932][T26603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1217.720251][T26603] ext4 filesystem being mounted at /2144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1217.917895][T26603] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1217.985070][T26603] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1218.009924][T26612] misc userio: The device must be registered before sending interrupts [ 1218.026835][T26603] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.9067: Failed to acquire dquot type 1 [ 1218.175225][T26616] netlink: 'syz.2.9072': attribute type 1 has an invalid length. [ 1218.185290][ T6023] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.427559][T26601] loop3: detected capacity change from 0 to 32768 [ 1218.505293][ T28] audit: type=1326 audit(2000000040.882:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26625 comm="syz.2.9077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf738ebe9 code=0x7ffc0000 [ 1218.552877][ T28] audit: type=1326 audit(2000000040.910:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26625 comm="syz.2.9077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf738ebe9 code=0x7ffc0000 [ 1218.771930][T16801] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1218.985799][T16801] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 1218.994945][T16801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.040280][T16801] usb 1-1: config 0 descriptor?? [ 1219.074206][T26641] loop2: detected capacity change from 0 to 256 [ 1219.105348][T26641] exfat: Deprecated parameter 'namecase' [ 1219.122914][T26641] exfat: Deprecated parameter 'namecase' [ 1219.134730][T26641] exfat: Deprecated parameter 'namecase' [ 1219.151701][T26641] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1219.222699][T26641] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1219.293324][T16801] snd-usb-hiface: probe of 1-1:0.0 failed with error -22 [ 1219.319757][ T6002] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1219.526869][T16801] usb 1-1: USB disconnect, device number 126 [ 1219.541853][ T6002] usb 4-1: Using ep0 maxpacket: 16 [ 1219.560977][ T6002] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 1219.574480][ T6002] usb 4-1: config 0 has no interface number 0 [ 1219.588319][ T6002] usb 4-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.613914][ T6002] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1219.627981][ T6002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.636072][ T6002] usb 4-1: Product: syz [ 1219.668806][ T6002] usb 4-1: Manufacturer: syz [ 1219.683734][ T6002] usb 4-1: SerialNumber: syz [ 1219.693324][T26656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9092'. [ 1219.706895][ T6002] usb 4-1: config 0 descriptor?? [ 1219.735416][ T6002] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1219.920656][T26665] Non-string source [ 1219.942864][T16801] usb 4-1: USB disconnect, device number 127 [ 1219.949555][T20724] usb 4-1: Failed to submit usb control message: -71 [ 1219.957050][T20724] usb 4-1: unable to send the bmi data to the device: -71 [ 1219.999847][T20724] usb 4-1: unable to get target info from device [ 1220.015879][T20724] usb 4-1: could not get target info (-71) [ 1220.044331][T20724] usb 4-1: could not probe fw (-71) [ 1220.339578][T26677] loop1: detected capacity change from 0 to 128 [ 1220.346519][T26677] EXT4-fs: Ignoring removed nobh option [ 1220.385566][T26677] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1220.404747][T26677] ext4 filesystem being mounted at /2158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1220.437046][T26677] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #11: comm syz.1.9100: No space for directory leaf checksum. Please run e2fsck -D. [ 1220.437168][T26677] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #11: comm syz.1.9100: checksumming directory block 0 [ 1220.625571][ T6023] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1220.779441][T26693] loop0: detected capacity change from 0 to 128 [ 1220.832586][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1220.862663][T26693] FAT-fs (loop0): Filesystem has been set read-only [ 1220.898588][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1220.919548][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1220.950411][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1220.971008][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.006933][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.039449][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.062284][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.072835][T26701] loop2: detected capacity change from 0 to 128 [ 1221.119926][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.199436][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.245292][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.311535][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.341254][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.363448][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.414899][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.423443][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.444047][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.453664][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.477456][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.485999][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.495066][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.504160][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.513983][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.527032][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.538221][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.549489][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.562654][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.578653][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.591444][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.609482][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.632730][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.648493][T16801] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1221.653245][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.676018][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.710850][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.742236][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.775588][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.776059][T26697] loop3: detected capacity change from 0 to 32768 [ 1221.813309][T26697] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.9110 (26697) [ 1221.828173][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.838734][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.852682][T16801] usb 3-1: Using ep0 maxpacket: 16 [ 1221.866146][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.875681][T16801] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.882443][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.886640][T26697] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1221.920262][T16801] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1221.927326][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.940231][T16801] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1221.958717][T26697] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1221.967635][T26693] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1221.970369][T16801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.984719][T26697] BTRFS info (device loop3): force zlib compression, level 3 [ 1221.992260][T26697] BTRFS info (device loop3): enabling ssd optimizations [ 1221.999430][T16801] usb 3-1: Product: syz [ 1222.003887][T26697] BTRFS info (device loop3): using spread ssd allocation scheme [ 1222.013235][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1222.013252][ T28] audit: type=1800 audit(2000000044.164:101): pid=26693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9106" name="file1" dev="loop0" ino=1048637 res=0 errno=0 [ 1222.039998][T16801] usb 3-1: Manufacturer: syz [ 1222.047210][T16801] usb 3-1: SerialNumber: syz [ 1222.052097][T26697] BTRFS info (device loop3): allowing degraded mounts [ 1222.063434][T26697] BTRFS info (device loop3): trying to use backup root at mount time [ 1222.083559][T26697] BTRFS info (device loop3): using free space tree [ 1222.222512][T26697] BTRFS info (device loop3): auto enabling async discard [ 1222.253585][T26697] BTRFS info (device loop3): checking UUID tree [ 1222.278118][ T60] BTRFS warning (device loop3): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x3c3638bf level 0 [ 1222.336397][T26736] loop1: detected capacity change from 0 to 128 [ 1222.340664][T16801] usb 3-1: cannot find UAC_HEADER [ 1222.350559][T26697] BTRFS: error (device loop3) in btrfs_fill_super:1172: errno=-5 IO failure [ 1222.382788][T26697] BTRFS error (device loop3: state E): commit super ret -30 [ 1222.444551][T16801] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1222.459771][T16801] usb 3-1: USB disconnect, device number 14 [ 1222.542238][T10334] udevd[10334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1222.791567][T26743] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1222.793439][T26740] netlink: 'syz.1.9123': attribute type 21 has an invalid length. [ 1223.519919][ T55] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1223.744506][ T55] usb 1-1: too many configurations: 25, using maximum allowed: 8 [ 1223.764779][ T55] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1223.778888][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.803781][ T55] usb 1-1: config 0 descriptor?? [ 1223.823897][ T55] pwc: Creative Labs Webcam Pro Ex detected. [ 1223.840710][ T55] pwc: Warning: more than 1 configuration available. [ 1223.865120][T26751] loop3: detected capacity change from 0 to 32768 [ 1223.888319][T26751] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.9128 (26751) [ 1223.944055][T26751] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1223.980416][T26751] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1224.006662][T26751] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1224.040394][T26751] BTRFS info (device loop3): use lzo compression, level 0 [ 1224.053718][T26751] BTRFS info (device loop3): force clearing of disk cache [ 1224.077311][ T55] pwc: Failed to set LED on/off time (-71) [ 1224.087051][ T55] pwc: send_video_command error -71 [ 1224.094035][ T55] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1224.112786][ T55] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 1224.123419][T26751] BTRFS info (device loop3): using free space tree [ 1224.131261][ T55] usb 1-1: USB disconnect, device number 127 [ 1224.249506][T26751] BTRFS info (device loop3): enabling ssd optimizations [ 1224.268506][T26751] BTRFS info (device loop3): auto enabling async discard [ 1224.279740][T26751] BTRFS info (device loop3): rebuilding free space tree [ 1224.732125][ T6024] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1224.906326][ T5788] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop3 scanned by udevd (5788) [ 1225.019177][T26782] loop2: detected capacity change from 0 to 32768 [ 1225.115914][T26782] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1225.164449][T26805] libceph: resolve '+ælc' (ret=-3): failed [ 1225.292499][T26782] XFS (loop2): Ending clean mount [ 1225.394385][T26782] XFS (loop2): Quotacheck needed: Please wait. [ 1225.396752][T26818] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9147'. [ 1225.579591][T26782] XFS (loop2): Quotacheck: Done. [ 1225.736349][ T6031] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1225.822593][T26826] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1225.914275][T26830] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 1225.924953][T26830] ip6gretap2: entered allmulticast mode [ 1226.050526][T26834] comedi comedi0: dt2801: I/O port conflict (0xfffffffffffffbff,2) [ 1226.059631][ T6002] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1226.268527][ T6002] usb 1-1: Using ep0 maxpacket: 16 [ 1226.291670][ T6002] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1226.311052][ T6002] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1226.329986][ T6002] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1226.342249][ T6002] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1226.352835][ T6002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.364573][ T6002] usb 1-1: Product: syz [ 1226.371317][ T6002] usb 1-1: Manufacturer: syz [ 1226.378837][T26846] IPv6: NLM_F_CREATE should be specified when creating new route [ 1226.381521][ T6002] usb 1-1: SerialNumber: syz [ 1226.395455][ T6002] usb 1-1: config 0 descriptor?? [ 1226.899239][T20487] usb 1-1: USB disconnect, device number 2 [ 1227.025505][T26861] loop1: detected capacity change from 0 to 4096 [ 1227.716867][T26881] loop1: detected capacity change from 0 to 1024 [ 1228.324290][T26903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9188'. [ 1228.341750][T26903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9188'. [ 1228.803877][T26919] xt_limit: Overflow, try lower: 65536/2147483648 [ 1228.920373][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1229.145081][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 1229.172809][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.194532][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1229.223420][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1229.245274][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.262573][ T27] usb 1-1: Product: syz [ 1229.272171][ T27] usb 1-1: Manufacturer: syz [ 1229.277529][ T27] usb 1-1: SerialNumber: syz [ 1229.533538][ T27] usb 1-1: cannot find UAC_HEADER [ 1229.592262][ T27] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1229.611709][ T27] usb 1-1: USB disconnect, device number 3 [ 1229.676823][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1229.723397][T26947] loop3: detected capacity change from 0 to 1024 [ 1229.840865][T26949] loop2: detected capacity change from 0 to 736 [ 1229.861782][ T133] hfsplus: b-tree write err: -5, ino 4 [ 1230.040593][T26937] loop1: detected capacity change from 0 to 32768 [ 1230.075771][T26937] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 1230.330603][T10334] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 1231.131434][T26983] loop1: detected capacity change from 0 to 512 [ 1231.187905][T26983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1231.251750][T26983] ext4 filesystem being mounted at /2201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1231.291553][T26994] loop0: detected capacity change from 0 to 512 [ 1231.299354][T26994] EXT4-fs: Ignoring removed oldalloc option [ 1231.305648][T26994] EXT4-fs: inline encryption not supported [ 1231.311701][T26994] EXT4-fs: Ignoring removed mblk_io_submit option [ 1231.340497][T26994] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1231.407309][T26994] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.9233: bg 0: block 64: padding at end of block bitmap is not set [ 1231.454278][ T6023] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.465002][T26994] Quota error (device loop0): write_blk: dquota write failed [ 1231.530122][T26994] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1231.540199][T26994] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.9233: Failed to acquire dquot type 0 [ 1231.631962][T26994] EXT4-fs (loop0): 1 truncate cleaned up [ 1231.645028][T26994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1231.667207][T27003] loop1: detected capacity change from 0 to 2048 [ 1231.800695][T26994] Quota error (device loop0): do_check_range: Getting block 144 out of range 0-5 [ 1231.826394][T27003] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=59, name_len=1 [ 1231.976660][ T6020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.545424][T27033] netlink: 'syz.0.9250': attribute type 21 has an invalid length. [ 1232.568336][T27034] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1232.571832][T27033] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9250'. [ 1232.587091][T27034] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1232.587784][T27033] netlink: 'syz.0.9250': attribute type 5 has an invalid length. [ 1232.602569][T27033] netlink: 'syz.0.9250': attribute type 6 has an invalid length. [ 1232.613464][T27033] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9250'. [ 1232.854783][T27047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9256'. [ 1233.176530][ T6003] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1233.412746][ T6003] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.428336][ T6003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1233.451451][ T6003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1233.475945][ T6003] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1233.494114][ T6003] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1233.514664][ T6003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.548574][T27069] loop0: detected capacity change from 0 to 4096 [ 1233.556587][ T6003] usb 2-1: config 0 descriptor?? [ 1233.589131][ T6003] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1233.648001][T27073] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1233.654445][T27074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1233.765473][T27069] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1233.836560][T27069] Remounting filesystem read-only [ 1233.850557][ T6003] spca561: probe of 2-1:0.0 failed with error -22 [ 1233.858182][ T6003] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1233.915092][ T6003] usb 2-1: MIDIStreaming interface descriptor not found [ 1234.098305][ T6003] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 1234.153543][ T6003] usb 2-1: USB disconnect, device number 14 [ 1234.342810][T27087] Cannot find set identified by id 0 to match [ 1234.431977][T27089] ip6tnl1: entered allmulticast mode [ 1234.508787][T27093] loop0: detected capacity change from 0 to 64 [ 1234.556682][T27093] syz.0.9278: attempt to access beyond end of device [ 1234.556682][T27093] loop0: rw=0, sector=3072, nr_sectors = 2 limit=64 [ 1234.737428][T27095] loop3: detected capacity change from 0 to 4096 [ 1234.781937][T27095] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1235.095782][T27107] loop1: detected capacity change from 0 to 2048 [ 1235.171712][T27107] loop1: p1 < > p3 p4 < > [ 1235.184085][T27107] loop1: p3 start 4284289 is beyond EOD, truncated [ 1235.555769][T27119] veth0_vlan: left promiscuous mode [ 1235.577435][T27119] vlan0: entered promiscuous mode [ 1235.582551][T27119] veth0_vlan: entered promiscuous mode [ 1235.793049][T27128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9295'. [ 1236.086677][ T28] audit: type=1326 audit(2000000057.330:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27136 comm="syz.2.9301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf738ebe9 code=0x7ffc0000 [ 1236.142112][T27141] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1236.160451][ T28] audit: type=1326 audit(2000000057.330:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27136 comm="syz.2.9301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf738ebe9 code=0x7ffc0000 [ 1236.215513][ T28] audit: type=1326 audit(2000000057.340:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27136 comm="syz.2.9301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f1bf738ebe9 code=0x7ffc0000 [ 1236.294462][ T28] audit: type=1326 audit(2000000057.340:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27136 comm="syz.2.9301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf738ebe9 code=0x7ffc0000 [ 1236.386616][ T28] audit: type=1326 audit(2000000057.340:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27136 comm="syz.2.9301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf738ebe9 code=0x7ffc0000 [ 1236.458305][T27150] binfmt_misc: register: failed to install interpreter file ./file0 [ 1236.622767][T27155] netlink: 292 bytes leftover after parsing attributes in process `syz.3.9309'. [ 1236.743760][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.750288][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1237.284059][T27183] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9322'. [ 1237.528384][T27190] loop3: detected capacity change from 0 to 64 [ 1237.873978][ T28] audit: type=1326 audit(2000000058.995:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27202 comm="syz.3.9331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1237.946098][ T28] audit: type=1326 audit(2000000058.995:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27202 comm="syz.3.9331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1238.031760][ T28] audit: type=1326 audit(2000000059.004:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27202 comm="syz.3.9331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1238.123019][ T28] audit: type=1326 audit(2000000059.004:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27202 comm="syz.3.9331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1238.169390][ T28] audit: type=1326 audit(2000000059.004:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27202 comm="syz.3.9331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1238.179434][T27213] loop0: detected capacity change from 0 to 256 [ 1238.236008][T27213] exfat: Deprecated parameter 'utf8' [ 1238.241630][T27213] exfat: Deprecated parameter 'namecase' [ 1238.257347][T27213] exfat: Deprecated parameter 'namecase' [ 1238.279063][T27213] exfat: Deprecated parameter 'utf8' [ 1238.329298][T27213] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1239.150398][T27248] loop3: detected capacity change from 0 to 64 [ 1239.365815][T27253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9356'. [ 1239.796271][T27245] loop0: detected capacity change from 0 to 32768 [ 1239.808739][T27245] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.9350 (27245) [ 1239.845912][T27245] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1239.878660][T27245] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1239.887599][ T6002] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1239.906311][T27245] BTRFS info (device loop0): enabling ssd optimizations [ 1239.927188][T27245] BTRFS info (device loop0): not using ssd optimizations [ 1239.945278][T27245] BTRFS info (device loop0): turning off barriers [ 1239.961902][T27245] BTRFS info (device loop0): using free space tree [ 1240.100492][ T6002] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1240.178207][ T6002] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1240.214459][ T6002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.245607][ T6002] usb 4-1: config 0 descriptor?? [ 1240.332993][ T6002] smsusb:smsusb_probe: board id=8, interface number 0 [ 1240.357668][T27291] tc_dump_action: action bad kind [ 1240.362099][ T6002] smsusb:smsusb_probe: Device initialized with return code -19 [ 1240.385299][ T6020] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1240.431196][T27294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.539952][ T6003] usb 4-1: USB disconnect, device number 2 [ 1240.627331][ T5788] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop0 scanned by udevd (5788) [ 1241.306917][T27315] loop3: detected capacity change from 0 to 64 [ 1241.396626][T27315] syz.3.9378: attempt to access beyond end of device [ 1241.396626][T27315] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1241.453787][T27315] Buffer I/O error on dev loop3, logical block 512, async page read [ 1241.462176][T27315] syz.3.9378: attempt to access beyond end of device [ 1241.462176][T27315] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1241.513729][T27315] Buffer I/O error on dev loop3, logical block 56576, async page read [ 1242.262651][ T28] audit: type=1107 audit(2000000063.100:112): pid=27347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1242.304056][T27348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9393'. [ 1242.357502][T27348] netlink: 'syz.3.9393': attribute type 1 has an invalid length. [ 1242.395900][T27348] netlink: 'syz.3.9393': attribute type 2 has an invalid length. [ 1242.413705][T27348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9393'. [ 1242.688968][T27365] overlayfs: disabling nfs_export due to verity=on [ 1242.705694][T27365] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1243.045603][T27376] netlink: 'syz.3.9408': attribute type 10 has an invalid length. [ 1243.082369][T27376] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1243.109185][T27376] team0: Port device virt_wifi0 added [ 1243.410314][T27391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9416'. [ 1243.475423][T27391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9416'. [ 1244.490904][T27435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9438'. [ 1244.512638][T27435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9438'. [ 1244.529968][T27437] netlink: zone id is out of range [ 1244.535562][T27435] tc_dump_action: action bad kind [ 1244.706133][T27446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9442'. [ 1244.715121][T27446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9442'. [ 1245.110591][T27462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9453'. [ 1245.129311][T27462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9453'. [ 1245.896147][T27489] nvme_fabrics: missing parameter 'transport=%s' [ 1245.903944][T27489] nvme_fabrics: missing parameter 'nqn=%s' [ 1246.208371][T27506] loop3: detected capacity change from 0 to 2048 [ 1246.306564][T27506] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1246.502059][T27517] bridge5: entered promiscuous mode [ 1246.518125][T27517] bridge5: entered allmulticast mode [ 1246.591935][T27523] loop1: detected capacity change from 0 to 164 [ 1246.646884][T27523] Unable to read rock-ridge attributes [ 1246.707004][T27523] Unable to read rock-ridge attributes [ 1246.751173][T27523] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1246.759265][T27527] loop2: detected capacity change from 0 to 512 [ 1246.781167][T27527] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1246.838466][T27527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1246.907958][T27527] ext4 filesystem being mounted at /2337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1246.940987][T27527] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.9483: corrupted xattr block 19: overlapping e_value [ 1247.071044][ T6031] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.901236][T27570] netlink: 'syz.1.9504': attribute type 5 has an invalid length. [ 1248.132685][T27578] loop1: detected capacity change from 0 to 1764 [ 1248.212347][T27578] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1248.226881][T27582] loop2: detected capacity change from 0 to 256 [ 1248.294414][T27582] FAT-fs (loop2): Directory bread(block 64) failed [ 1248.316281][T27582] FAT-fs (loop2): Directory bread(block 65) failed [ 1248.342628][T27582] FAT-fs (loop2): Directory bread(block 66) failed [ 1248.378302][T27582] FAT-fs (loop2): Directory bread(block 67) failed [ 1248.383718][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1248.405078][T27582] FAT-fs (loop2): Directory bread(block 68) failed [ 1248.411711][T27582] FAT-fs (loop2): Directory bread(block 69) failed [ 1248.456517][T27582] FAT-fs (loop2): Directory bread(block 70) failed [ 1248.479699][T27582] FAT-fs (loop2): Directory bread(block 71) failed [ 1248.486431][T27582] FAT-fs (loop2): Directory bread(block 72) failed [ 1248.510945][T27582] FAT-fs (loop2): Directory bread(block 73) failed [ 1248.567248][T27586] netlink: 136 bytes leftover after parsing attributes in process `syz.0.9511'. [ 1248.618859][T27586] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1248.634733][T27588] loop1: detected capacity change from 0 to 512 [ 1248.646611][T27588] EXT4-fs: Ignoring removed mblk_io_submit option [ 1248.703657][T27588] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1248.740358][T27588] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1248.771864][T27588] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.9512: attempt to clear invalid blocks 2 len 1 [ 1248.842265][T27572] loop3: detected capacity change from 0 to 32768 [ 1248.873888][T27588] EXT4-fs (loop1): Remounting filesystem read-only [ 1248.897390][T27588] EXT4-fs (loop1): 1 truncate cleaned up [ 1248.932394][T27588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1248.946259][T27572] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1249.003230][T27572] (syz.3.9503,27572,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=0, inode=0, rec_len=49, name_len=1 [ 1249.062299][T27572] (syz.3.9503,27572,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1249.081617][T27595] loop0: detected capacity change from 0 to 4096 [ 1249.089028][T27572] (syz.3.9503,27572,1):ocfs2_symlink:1867 ERROR: status = -2 [ 1249.099916][T27572] (syz.3.9503,27572,1):ocfs2_symlink:2068 ERROR: status = -2 [ 1249.109290][ T6023] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1249.120399][T27595] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1249.202443][ T6024] ocfs2: Unmounting device (7,3) on (node local) [ 1249.677800][T27608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9521'. [ 1249.716663][T27608] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9521'. [ 1249.762439][T27612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9522'. [ 1250.078175][T27620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9526'. [ 1250.087483][T27620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9526'. [ 1250.434181][T27635] loop0: detected capacity change from 0 to 16 [ 1250.468201][T27635] erofs: (device loop0): mounted with root inode @ nid 36. [ 1250.517891][T27635] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 32811 of nid 36 [ 1250.978644][T27651] ip6t_srh: unknown srh match flags 4001 [ 1251.309066][T27661] netlink: 'syz.3.9546': attribute type 1 has an invalid length. [ 1251.321496][T27661] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.9546'. [ 1251.336210][T27636] loop1: detected capacity change from 0 to 32768 [ 1251.337228][T27663] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9547'. [ 1251.363064][T27636] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.9534 (27636) [ 1251.404606][T27636] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1251.436427][T27636] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1251.463690][T27636] BTRFS info (device loop1): using free space tree [ 1251.610294][T27636] BTRFS info (device loop1): enabling ssd optimizations [ 1251.645214][T27636] BTRFS info (device loop1): auto enabling async discard [ 1251.834465][ T6023] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1252.881151][T27720] loop0: detected capacity change from 0 to 512 [ 1252.958553][T27720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.977485][T27720] ext4 filesystem being mounted at /2400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1253.238368][T27720] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz.0.9567: Directory hole found for htree leaf block 0 [ 1253.308266][T27720] EXT4-fs (loop0): Remounting filesystem read-only [ 1253.489344][ T6020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1253.530942][ T133] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1253.570191][ T133] Quota error (device loop0): write_blk: dquota write failed [ 1253.577660][ T133] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 1253.600800][T27741] No such timeout policy "syz0" [ 1253.607959][ T133] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1253.638838][ T133] Quota error (device loop0): write_blk: dquota write failed [ 1253.661985][ T133] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 1253.927492][T27747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9579'. [ 1253.962845][T27747] netlink: 'syz.1.9579': attribute type 1 has an invalid length. [ 1254.181925][T27754] loop1: detected capacity change from 0 to 512 [ 1254.241674][T27754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1254.261278][T27754] ext4 filesystem being mounted at /2285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1254.366331][T27764] loop0: detected capacity change from 0 to 512 [ 1254.375606][T27764] EXT4-fs: Ignoring removed i_version option [ 1254.382407][T27764] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1254.413295][T27764] EXT4-fs (loop0): 1 truncate cleaned up [ 1254.417880][T27754] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.9582: corrupted xattr block 33: invalid ea_ino [ 1254.434578][T27764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1254.522607][T27754] fscrypt (loop1, inode 15): Error -117 getting encryption context [ 1254.611362][T27764] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.9587: corrupted in-inode xattr: overlapping e_value [ 1254.682035][ T6023] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.709427][T27764] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1781: inode #15: comm syz.0.9587: unable to update i_inline_off [ 1254.874232][T27773] netlink: 'syz.2.9591': attribute type 2 has an invalid length. [ 1254.882723][T27773] netlink: 'syz.2.9591': attribute type 8 has an invalid length. [ 1254.889710][ T6020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.890737][T27773] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9591'. [ 1255.092758][T27777] netlink: 'syz.1.9593': attribute type 1 has an invalid length. [ 1255.121023][T27777] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.9593'. [ 1255.317345][T27787] loop0: detected capacity change from 0 to 128 [ 1255.342102][T27787] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1255.384468][T27787] hpfs: filesystem error: improperly stopped [ 1255.405740][T27787] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1255.425006][T27787] hpfs: You really don't want any checks? You are crazy... [ 1255.442092][T27787] hpfs: hpfs_map_sector(): read error [ 1255.469238][T27787] hpfs: code page support is disabled [ 1255.477788][T27787] hpfs: hpfs_map_4sectors(): unaligned read [ 1255.507639][T27787] hpfs: hpfs_map_4sectors(): unaligned read [ 1255.514496][T27787] hpfs: filesystem error: unable to find root dir [ 1255.816755][T27801] loop3: detected capacity change from 0 to 2048 [ 1255.894539][T27801] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1255.905932][T27801] UDF-fs: Scanning with blocksize 512 failed [ 1255.921967][T27801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1256.033003][T27809] loop2: detected capacity change from 0 to 2048 [ 1256.100580][T27809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1256.206127][T27814] loop1: detected capacity change from 0 to 256 [ 1256.235524][T27814] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1256.311280][T27814] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1256.417284][T27820] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9612'. [ 1256.418094][T27819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9611'. [ 1256.805435][T27831] netlink: 'syz.3.9618': attribute type 10 has an invalid length. [ 1256.826450][T27831] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9618'. [ 1258.040380][T16801] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1258.083683][ T9] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 1258.261494][T16801] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1258.286594][T16801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.305878][ T9] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1258.326728][T16801] usb 3-1: Product: syz [ 1258.331719][ T9] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1258.346041][T16801] usb 3-1: Manufacturer: syz [ 1258.351038][T16801] usb 3-1: SerialNumber: syz [ 1258.356128][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1258.369971][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1258.395986][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1258.408682][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1258.427282][T16801] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1258.469364][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1258.495100][ T6003] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1258.515744][ T9] usb 2-1: string descriptor 0 read error: -22 [ 1258.522765][ T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1258.536979][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.571185][ T9] usb 2-1: config 0 descriptor?? [ 1258.586422][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 1258.594113][ T9] hub: probe of 2-1:0.0 failed with error -5 [ 1258.646943][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input72 [ 1258.952464][ T9] usb 2-1: USB disconnect, device number 15 [ 1258.978607][ T27] usb 3-1: USB disconnect, device number 15 [ 1259.189749][T27907] loop3: detected capacity change from 0 to 64 [ 1259.666062][ T6003] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1259.685315][ T6003] ath9k_htc: Failed to initialize the device [ 1259.707831][ T27] usb 3-1: ath9k_htc: USB layer deinitialized [ 1259.715437][T27919] loop2: detected capacity change from 0 to 128 [ 1259.733977][T27919] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1259.776017][T27919] hpfs: filesystem error: improperly stopped [ 1259.811889][T27919] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1259.846522][T27919] hpfs: You really don't want any checks? You are crazy... [ 1259.874606][T27919] hpfs: hpfs_map_sector(): read error [ 1259.892948][T27919] hpfs: code page support is disabled [ 1259.899209][T27919] hpfs: hpfs_map_4sectors(): unaligned read [ 1259.931867][T27919] hpfs: hpfs_map_4sectors(): unaligned read [ 1259.953357][T27919] hpfs: filesystem error: unable to find root dir [ 1259.966358][T27923] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1260.087411][T27913] loop3: detected capacity change from 0 to 32768 [ 1260.199057][T27913] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1260.504746][T27944] gretap1: entered promiscuous mode [ 1260.520458][T27913] XFS (loop3): Ending clean mount [ 1260.555197][T27945] loop2: detected capacity change from 0 to 2048 [ 1260.634300][T27945] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1260.743327][ T6024] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1261.515532][T27967] futex_wake_op: syz.2.9682 tries to shift op by 32; fix this program [ 1261.605702][T27971] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1261.679172][T27973] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9685'. [ 1261.708650][T27975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9686'. [ 1262.117865][T27989] loop1: detected capacity change from 0 to 8 [ 1262.268355][T27989] SQUASHFS error: Failed to read block 0x33c: -5 [ 1262.293186][T27989] SQUASHFS error: Unable to read metadata cache entry [33a] [ 1262.317557][T27989] SQUASHFS error: Unable to read inode 0xa7 [ 1262.847788][T28014] netlink: 'syz.0.9705': attribute type 5 has an invalid length. [ 1262.927562][ T27] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1262.995606][T28019] loop2: detected capacity change from 0 to 8 [ 1263.041016][T28019] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1263.068810][T28019] SQUASHFS error: Failed to read block 0x4ec: -5 [ 1263.080125][T28019] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 1263.090543][T28019] SQUASHFS error: Unable to read inode 0x2011f [ 1263.135777][ T27] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1263.146178][T15439] Bluetooth: hci3: unexpected event for opcode 0x040d [ 1263.152414][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.173874][ T27] usb 2-1: Product: syz [ 1263.184511][ T27] usb 2-1: Manufacturer: syz [ 1263.189927][ T27] usb 2-1: SerialNumber: syz [ 1263.242264][ T27] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1263.298010][T20487] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1265.312405][T20487] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1265.319663][T20487] ath9k_htc: Failed to initialize the device [ 1265.365609][ T27] usb 2-1: USB disconnect, device number 16 [ 1265.387721][ T27] usb 2-1: ath9k_htc: USB layer deinitialized [ 1266.032637][T28063] loop2: detected capacity change from 0 to 32768 [ 1266.054494][T28063] XFS: noikeep mount option is deprecated. [ 1266.132649][T28063] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1266.332362][T28063] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1266.339742][T28073] loop0: detected capacity change from 0 to 32768 [ 1266.433691][T28063] XFS (loop2): Starting recovery (logdev: internal) [ 1266.448261][T28073] jfs_lookup: iget failed on inum 32 [ 1266.482632][T28073] jfs_lookup: iget failed on inum 32 [ 1266.495011][T28063] XFS (loop2): Ending recovery (logdev: internal) [ 1266.536203][T28063] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x516/0x640, xfs_finobt block 0x20 [ 1266.559869][T28063] XFS (loop2): Unmount and run xfs_repair [ 1266.575683][T28063] XFS (loop2): Failed to initialize disk quotas. [ 1266.770233][T28063] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x516/0x640, xfs_finobt block 0x20 [ 1266.834857][T28063] XFS (loop2): Unmount and run xfs_repair [ 1267.019645][ T6031] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1267.095540][T28100] loop1: detected capacity change from 0 to 4096 [ 1267.169154][ T6003] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1267.190484][T28101] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1267.442106][ T6003] usb 4-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1267.461660][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.471847][ T6003] usb 4-1: Product: syz [ 1267.525749][ T6003] usb 4-1: Manufacturer: syz [ 1267.530434][ T6003] usb 4-1: SerialNumber: syz [ 1267.570142][ T6003] usb 4-1: config 0 descriptor?? [ 1267.578990][ T6003] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1267.883193][T28098] loop0: detected capacity change from 0 to 32768 [ 1267.980642][T28098] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1268.036563][T16801] usb 4-1: USB disconnect, device number 3 [ 1268.109747][ T6020] ocfs2: Unmounting device (7,0) on (node local) [ 1268.377997][T28124] netlink: 'syz.2.9753': attribute type 15 has an invalid length. [ 1268.876391][T28140] comedi comedi0: dt2801: I/O port conflict (0x4f27,2) [ 1269.325497][T28156] netlink: 'syz.0.9768': attribute type 21 has an invalid length. [ 1269.343391][T28156] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9768'. [ 1269.488018][T28160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9772'. [ 1269.716089][T28166] loop3: detected capacity change from 0 to 256 [ 1269.893735][T28166] FAT-fs (loop3): Directory bread(block 64) failed [ 1269.900752][T28166] FAT-fs (loop3): Directory bread(block 65) failed [ 1269.921798][T28166] FAT-fs (loop3): Directory bread(block 66) failed [ 1269.940413][T28166] FAT-fs (loop3): Directory bread(block 67) failed [ 1269.971224][T28166] FAT-fs (loop3): Directory bread(block 68) failed [ 1269.981123][T28166] FAT-fs (loop3): Directory bread(block 69) failed [ 1270.017766][T28166] FAT-fs (loop3): Directory bread(block 70) failed [ 1270.025744][T28166] FAT-fs (loop3): Directory bread(block 71) failed [ 1270.049701][T28166] FAT-fs (loop3): Directory bread(block 72) failed [ 1270.059296][T28166] FAT-fs (loop3): Directory bread(block 73) failed [ 1270.361431][T28182] CIFS: VFS: Malformed UNC in devname [ 1270.585739][T28188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9786'. [ 1270.825863][T28193] netlink: 'syz.1.9788': attribute type 3 has an invalid length. [ 1270.913740][T28197] netlink: 'syz.0.9790': attribute type 10 has an invalid length. [ 1270.981699][T28180] loop2: detected capacity change from 0 to 32768 [ 1271.020487][T28180] (syz.2.9782,28180,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1271.052873][T28180] (syz.2.9782,28180,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1271.100813][T28180] JBD2: Ignoring recovery information on journal [ 1271.118437][T28197] team0: Port device wlan1 added [ 1271.169226][T28180] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1271.380665][T28211] program syz.0.9795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1271.476293][ T6031] ocfs2: Unmounting device (7,2) on (node local) [ 1271.485779][T28214] comedi comedi3: dt2814: I/O port conflict (0x4f27,2) [ 1271.656704][T28218] loop1: detected capacity change from 0 to 256 [ 1271.724528][T28218] FAT-fs (loop1): Directory bread(block 64) failed [ 1271.748599][T28218] FAT-fs (loop1): Directory bread(block 65) failed [ 1271.787031][T28218] FAT-fs (loop1): Directory bread(block 66) failed [ 1271.798854][T28218] FAT-fs (loop1): Directory bread(block 67) failed [ 1271.811271][T28218] FAT-fs (loop1): Directory bread(block 68) failed [ 1271.819614][T28218] FAT-fs (loop1): Directory bread(block 69) failed [ 1271.827252][T28218] FAT-fs (loop1): Directory bread(block 70) failed [ 1271.839156][T28218] FAT-fs (loop1): Directory bread(block 71) failed [ 1271.849981][T28218] FAT-fs (loop1): Directory bread(block 72) failed [ 1271.856607][T28218] FAT-fs (loop1): Directory bread(block 73) failed [ 1272.181587][T28227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9804'. [ 1272.538021][ T28] audit: type=1326 audit(2000000091.406:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28240 comm="syz.3.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1272.592194][ T28] audit: type=1326 audit(2000000091.406:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28240 comm="syz.3.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1272.680467][ T28] audit: type=1326 audit(2000000091.424:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28240 comm="syz.3.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1272.767358][ T28] audit: type=1326 audit(2000000091.424:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28240 comm="syz.3.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1272.846657][ T28] audit: type=1326 audit(2000000091.424:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28240 comm="syz.3.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1273.225235][T28266] netlink: 'syz.3.9819': attribute type 1 has an invalid length. [ 1273.467369][T28276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9825'. [ 1273.487012][T28276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9825'. [ 1274.446666][T28310] netlink: 'syz.2.9844': attribute type 4 has an invalid length. [ 1274.669207][T28321] netlink: 'syz.3.9850': attribute type 10 has an invalid length. [ 1274.803922][T28321] team0: Port device wlan1 added [ 1274.879141][T28328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9852'. [ 1274.902914][T28328] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9852'. [ 1275.758004][T28354] loop1: detected capacity change from 0 to 512 [ 1275.805070][T28354] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1275.831195][T28354] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1275.856870][T28354] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 1275.910012][T28354] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 1275.990465][T28354] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.9864: Failed to acquire dquot type 1 [ 1276.025135][T28354] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.9864: bg 0: block 40: padding at end of block bitmap is not set [ 1276.065052][T28338] loop2: detected capacity change from 0 to 40427 [ 1276.092206][T28338] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1276.106620][T28354] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 1276.119981][T28338] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1276.140693][T28354] EXT4-fs (loop1): 1 truncate cleaned up [ 1276.150858][T28338] F2FS-fs (loop2): heap/no_heap options were deprecated [ 1276.165593][T28354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1276.181734][T28362] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1276.193777][T28338] F2FS-fs (loop2): invalid crc value [ 1276.211733][T28338] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1276.310546][T28354] EXT4-fs error (device loop1): ext4_get_link:104: inode #16: comm syz.1.9864: bad symlink. [ 1276.359251][T28338] F2FS-fs (loop2): Start checkpoint disabled! [ 1276.379746][T28354] EXT4-fs error (device loop1): ext4_get_link:104: inode #16: comm syz.1.9864: bad symlink. [ 1276.398286][T28338] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1276.407263][T28338] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1276.508890][T28369] netlink: 'syz.0.9869': attribute type 12 has an invalid length. [ 1276.541521][ T6023] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.783199][T28376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9871'. [ 1276.793481][T28376] netlink: 'syz.1.9871': attribute type 2 has an invalid length. [ 1276.817925][T28376] netlink: 'syz.1.9871': attribute type 1 has an invalid length. [ 1276.822616][ T133] kworker/u4:5: attempt to access beyond end of device [ 1276.822616][ T133] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1276.866527][ T133] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1277.443214][T28394] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1277.872654][T28409] loop1: detected capacity change from 0 to 256 [ 1277.979662][T28409] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 1278.210458][T28417] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.9891'. [ 1278.539956][T28429] loop0: detected capacity change from 0 to 512 [ 1278.574036][T28429] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.9897: iget: bad extended attribute block 1 [ 1278.618328][T28434] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1278.699862][T28429] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.9897: couldn't read orphan inode 15 (err -117) [ 1278.711894][ T28] audit: type=1326 audit(2000000097.166:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28435 comm="syz.1.9900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8738ebe9 code=0x7ffc0000 [ 1278.761514][T28429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1278.797427][ T28] audit: type=1326 audit(2000000097.166:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28435 comm="syz.1.9900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8738ebe9 code=0x7ffc0000 [ 1278.846229][ T28] audit: type=1326 audit(2000000097.175:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28435 comm="syz.1.9900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7efc8738ebe9 code=0x7ffc0000 [ 1278.944970][ T28] audit: type=1326 audit(2000000097.175:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28435 comm="syz.1.9900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8738ebe9 code=0x7ffc0000 [ 1278.995769][ T6020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.026891][ T28] audit: type=1326 audit(2000000097.175:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28435 comm="syz.1.9900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8738ebe9 code=0x7ffc0000 [ 1279.588929][T28456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9910'. [ 1279.601422][T28426] loop3: detected capacity change from 0 to 32768 [ 1279.639675][T28426] (syz.3.9896,28426,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1279.671585][T28459] loop1: detected capacity change from 0 to 512 [ 1279.682132][T28426] (syz.3.9896,28426,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1279.712720][T28459] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.9911: iget: bad extended attribute block 1 [ 1279.753300][T28459] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.9911: couldn't read orphan inode 15 (err -117) [ 1279.784430][T28464] loop2: detected capacity change from 0 to 8 [ 1279.808950][T28459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1279.838753][T28426] JBD2: Ignoring recovery information on journal [ 1279.898174][T28464] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1279.940207][ T5788] udevd[5788]: incorrect cramfs checksum on /dev/loop2 [ 1279.994841][T28464] cramfs: Error -3 while decompressing! [ 1280.019536][T28426] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1280.046119][T28464] cramfs: ffffffff96fde308(26)->ffff8880754b6000(4096) [ 1280.047324][ T5788] udevd[5788]: incorrect cramfs checksum on /dev/loop2 [ 1280.104457][ T6023] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.114808][T28464] cramfs: Error -3 while decompressing! [ 1280.120621][T28464] cramfs: ffffffff96fde322(26)->ffff888051ba1000(4096) [ 1280.166376][T28464] cramfs: Error -3 while decompressing! [ 1280.185678][T28464] cramfs: ffffffff96fde33c(16)->ffff888051ba0000(4096) [ 1280.248078][T28464] cramfs: Error -3 while decompressing! [ 1280.269695][T28464] cramfs: ffffffff96fde308(26)->ffff8880754b6000(4096) [ 1280.317048][ T6024] ocfs2: Unmounting device (7,3) on (node local) [ 1280.630553][T28460] loop0: detected capacity change from 0 to 32768 [ 1280.780182][T28460] jfs_mkdir: dtInsert returned -EIO [ 1280.786814][T28474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9914'. [ 1280.796788][T28474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9914'. [ 1280.808756][T28460] ERROR: (device loop0): jfs_mkdir: [ 1280.808756][T28460] [ 1280.839142][T28460] ERROR: (device loop0): remounting filesystem as read-only [ 1282.185534][T28509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9935'. [ 1282.208476][T28509] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1283.219685][T28522] loop0: detected capacity change from 0 to 32768 [ 1283.263827][T28522] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.9940 (28522) [ 1283.311854][T28522] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1283.358982][T28522] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1283.396399][T28522] BTRFS info (device loop0): using free space tree [ 1283.477085][T28563] netlink: 'syz.3.9958': attribute type 6 has an invalid length. [ 1283.502774][T28563] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9958'. [ 1283.547776][T28522] BTRFS info (device loop0): enabling ssd optimizations [ 1283.602756][T28522] BTRFS info (device loop0): auto enabling async discard [ 1283.776801][T28575] netlink: 'syz.1.9959': attribute type 1 has an invalid length. [ 1283.813077][T28575] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9959'. [ 1283.842330][ T6020] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1284.160368][ T5788] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5788) [ 1285.446962][T28626] loop2: detected capacity change from 0 to 1024 [ 1285.485836][T28626] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1285.533695][T28626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1285.612247][T28626] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: inode #11: comm syz.2.9984: missing EA_INODE flag [ 1285.631955][T28626] EXT4-fs (loop2): Remounting filesystem read-only [ 1285.642609][T28636] loop0: detected capacity change from 0 to 256 [ 1285.680769][T28636] exfat: Unknown parameter '0xffffffffffffffff' [ 1285.691772][ T6031] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.830367][T28639] loop2: detected capacity change from 0 to 256 [ 1285.851189][T28639] exfat: Deprecated parameter 'utf8' [ 1285.864434][T28639] exfat: Deprecated parameter 'utf8' [ 1285.925457][T28639] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7bac8b1f, utbl_chksum : 0xe619d30d) [ 1286.048452][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1286.273846][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1286.299660][ T9] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1286.326399][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.357757][ T9] usb 1-1: config 0 has no interface number 0 [ 1286.367356][ T9] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1286.408069][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.428626][ T9] usb 1-1: config 0 descriptor?? [ 1286.466911][ T9] usb 1-1: Found UVC 0.00 device (0bd3:0555) [ 1286.490711][ T9] usb 1-1: No valid video chain found. [ 1286.698576][ T9] usb 1-1: USB disconnect, device number 4 [ 1286.702720][T28663] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1286.751308][T28666] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1287.137713][T15439] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 1287.156441][T28682] loop3: detected capacity change from 0 to 256 [ 1287.645947][T28690] loop1: detected capacity change from 0 to 4096 [ 1287.704849][T28700] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1287.802328][T28690] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 1287.820928][T28690] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 1287.871159][T28690] Remounting filesystem read-only [ 1287.885489][T28690] NILFS (loop1): error -5 truncating bmap (ino=12) [ 1288.014241][ T6023] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 1288.037118][ T6023] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 1288.051244][ T6023] NILFS (loop1): discard dirty block: blocknr=14, size=4096 [ 1288.060736][ T6023] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 1288.070745][ T6023] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 1288.079327][ T6023] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 1288.087833][ T6023] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 1288.103083][ T6023] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 1288.110516][ T6023] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 1288.154747][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1288.358025][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1288.368289][ T9] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 1288.383063][ T9] usb 1-1: config 0 has no interface number 0 [ 1288.405214][ T9] usb 1-1: config 0 interface 237 has no altsetting 0 [ 1288.423785][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1288.439038][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.458857][ T9] usb 1-1: Product: syz [ 1288.463648][ T9] usb 1-1: Manufacturer: syz [ 1288.496979][ T9] usb 1-1: SerialNumber: syz [ 1288.514762][ T9] usb 1-1: config 0 descriptor?? [ 1288.538893][ T9] snd_usb_podhd 1-1:0.237: Line 6 POD HD300 found [ 1288.776176][ T9] snd_usb_podhd 1-1:0.237: cannot get proper max packet size [ 1288.783922][ T9] snd_usb_podhd 1-1:0.237: Line 6 POD HD300 now disconnected [ 1288.859873][ T9] snd_usb_podhd: probe of 1-1:0.237 failed with error -22 [ 1288.887370][T28710] loop1: detected capacity change from 0 to 32768 [ 1288.962151][T28710] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1288.991025][T28710] (syz.1.10022,28710,1):ocfs2_mknod:502 ERROR: status = -2 [ 1289.010180][T28710] (syz.1.10022,28710,1):ocfs2_create:676 ERROR: status = -2 [ 1289.089840][ T9] usb 1-1: USB disconnect, device number 5 [ 1289.172312][ T6023] (syz-executor,6023,1):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 1289.241940][ T6023] ocfs2: Unmounting device (7,1) on (node local) [ 1289.294583][T28716] loop3: detected capacity change from 0 to 32768 [ 1289.331309][T28716] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.10026 (28716) [ 1289.362714][T28718] loop2: detected capacity change from 0 to 32768 [ 1289.387492][T28716] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1289.390189][T28722] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1289.405223][T28716] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1289.420982][T28716] BTRFS info (device loop3): force zlib compression, level 3 [ 1289.431371][T28716] BTRFS info (device loop3): force clearing of disk cache [ 1289.443156][T28716] BTRFS info (device loop3): setting nodatasum [ 1289.454756][T28722] overlayfs: missing 'lowerdir' [ 1289.461369][T28718] (syz.2.10027,28718,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1289.478620][T28716] BTRFS info (device loop3): use zlib compression, level 3 [ 1289.492352][T28718] (syz.2.10027,28718,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1289.547342][T28716] BTRFS info (device loop3): allowing degraded mounts [ 1289.554382][T28716] BTRFS info (device loop3): enabling disk space caching [ 1289.580492][T28716] BTRFS info (device loop3): disk space caching is enabled [ 1289.659003][T28718] JBD2: Ignoring recovery information on journal [ 1289.822917][T28716] BTRFS info (device loop3): enabling ssd optimizations [ 1289.848209][T28716] BTRFS info (device loop3): auto enabling async discard [ 1289.880935][T28718] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1289.907741][T28716] BTRFS info (device loop3): rebuilding free space tree [ 1289.974733][T28716] BTRFS info (device loop3): disabling free space tree [ 1289.981761][T28716] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1290.036891][T28716] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1290.294431][ T6031] ocfs2: Unmounting device (7,2) on (node local) [ 1290.302303][T28716] BTRFS info (device loop3): balance: start -f -susage=128..7,drange=9..0,limit=42949672974,stripes=0..255 [ 1290.358419][T28716] BTRFS info (device loop3): balance: ended with status: 0 [ 1290.446965][T28756] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10035'. [ 1290.586071][ T6024] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1290.686358][T28760] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1291.353330][T28780] binder: 28778:28780 ioctl c018620c 0 returned -14 [ 1291.677171][T28784] bridge1: entered promiscuous mode [ 1292.031419][T28770] loop3: detected capacity change from 0 to 32768 [ 1292.090168][T28770] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.10038 (28770) [ 1292.167582][T28770] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1292.200708][T28770] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1292.235440][T28770] BTRFS info (device loop3): force zlib compression, level 3 [ 1292.249763][T28770] BTRFS info (device loop3): force clearing of disk cache [ 1292.274337][T28776] loop0: detected capacity change from 0 to 32768 [ 1292.295472][T28776] (syz.0.10045,28776,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1292.305743][T28770] BTRFS info (device loop3): turning off barriers [ 1292.327928][T28776] (syz.0.10045,28776,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1292.343092][T28770] BTRFS info (device loop3): doing ref verification [ 1292.382467][T28770] BTRFS info (device loop3): enabling disk space caching [ 1292.391757][T28776] JBD2: Ignoring recovery information on journal [ 1292.416059][T28770] BTRFS info (device loop3): disk space caching is enabled [ 1292.508802][T28776] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1292.539516][T28770] BTRFS info (device loop3): enabling ssd optimizations [ 1292.547250][T28770] BTRFS info (device loop3): auto enabling async discard [ 1292.548779][T28776] (syz.0.10045,28776,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 1292.577238][T28770] BTRFS info (device loop3): rebuilding free space tree [ 1292.581961][T16801] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1292.613206][T28770] BTRFS info (device loop3): disabling free space tree [ 1292.634282][T28770] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1292.656970][T28770] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1292.753912][T28776] (syz.0.10045,28776,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 1292.825173][T28776] (syz.0.10045,28776,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 1292.840530][T16801] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1292.860643][T28776] (syz.0.10045,28776,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 1292.873695][T16801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.886370][T16801] usb 2-1: Product: syz [ 1292.890623][T16801] usb 2-1: Manufacturer: syz [ 1292.906658][T28776] (syz.0.10045,28776,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1292.907362][T16801] usb 2-1: SerialNumber: syz [ 1292.945078][T28776] (syz.0.10045,28776,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1292.958637][T16801] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1292.970468][ T6024] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1292.992744][ T6003] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1293.022220][T28776] Quota error (device loop0): find_block_dqentry: Can't read quota tree block 6 [ 1293.034860][T28776] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1293.045115][T28776] (syz.0.10045,28776,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 1293.072929][T28776] (syz.0.10045,28776,0):ocfs2_mknod:314 ERROR: status = -5 [ 1293.081256][T28776] (syz.0.10045,28776,0):ocfs2_mknod:502 ERROR: status = -5 [ 1293.094494][T28776] (syz.0.10045,28776,0):ocfs2_mkdir:659 ERROR: status = -5 [ 1293.235484][ T5788] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop3 scanned by udevd (5788) [ 1293.367841][ T6020] ocfs2: Unmounting device (7,0) on (node local) [ 1293.571459][ T27] usb 2-1: USB disconnect, device number 17 [ 1294.022903][T28840] tmpfs: Group quota block hardlimit too large. [ 1294.159900][ T6003] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1294.190701][ T6003] ath9k_htc: Failed to initialize the device [ 1294.223174][ T27] usb 2-1: ath9k_htc: USB layer deinitialized [ 1294.234383][T28843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10069'. [ 1294.422470][T28854] Lens B: ================= START STATUS ================= [ 1294.430227][T28854] Lens B: Focus, Absolute: 0 [ 1294.438551][T28854] Lens B: ================== END STATUS ================== [ 1294.839649][T28869] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1295.081979][T28878] syz.0.10086: attempt to access beyond end of device [ 1295.081979][T28878] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1295.125553][T28878] syz.0.10086: attempt to access beyond end of device [ 1295.125553][T28878] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1295.169419][T28878] syz.0.10086: attempt to access beyond end of device [ 1295.169419][T28878] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1295.170316][ T28] audit: type=1326 audit(2000000112.576:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28880 comm="syz.3.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1295.202198][T28878] syz.0.10086: attempt to access beyond end of device [ 1295.202198][T28878] nbd0: rw=0, sector=18, nr_sectors = 2 limit=0 [ 1295.255990][ T28] audit: type=1326 audit(2000000112.576:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28880 comm="syz.3.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1295.288723][T28878] syz.0.10086: attempt to access beyond end of device [ 1295.288723][T28878] nbd0: rw=0, sector=30, nr_sectors = 2 limit=0 [ 1295.303635][T28878] syz.0.10086: attempt to access beyond end of device [ 1295.303635][T28878] nbd0: rw=0, sector=36, nr_sectors = 2 limit=0 [ 1295.317373][ T28] audit: type=1326 audit(2000000112.632:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28880 comm="syz.3.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1295.335817][T28878] VFS: unable to find oldfs superblock on device nbd0 [ 1295.341920][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.352502][T28886] IPVS: length: 225 != 8 [ 1295.358932][ T28] audit: type=1326 audit(2000000112.754:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28880 comm="syz.3.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1295.411905][ T28] audit: type=1326 audit(2000000112.754:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28880 comm="syz.3.10087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1295.598197][ T27] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1295.742421][T28896] loop1: detected capacity change from 0 to 1024 [ 1295.802784][ T27] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1295.814705][T28895] loop0: detected capacity change from 0 to 4096 [ 1295.830243][T28896] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 1295.831524][ T27] usb 3-1: config 1 has no interface number 1 [ 1295.838982][T28895] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1295.869424][T28896] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 1295.875400][ T27] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1295.915375][ T27] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1295.935144][T28895] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 1295.955100][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1295.964927][T28895] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 1295.975360][T28895] ntfs: volume version 3.1. [ 1296.009015][T20724] hfsplus: b-tree write err: -5, ino 4 [ 1296.037541][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.075811][ T27] usb 3-1: Product: syz [ 1296.100541][ T27] usb 3-1: Manufacturer: syz [ 1296.123121][ T27] usb 3-1: SerialNumber: syz [ 1296.382186][ T27] usb 3-1: 2:1 : unsupported format bits 0x80 [ 1296.442755][ T27] usb 3-1: USB disconnect, device number 16 [ 1296.517102][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1296.955563][T28924] loop1: detected capacity change from 0 to 256 [ 1297.407565][T28940] loop3: detected capacity change from 0 to 64 [ 1297.483840][T28940] Trying to free block not in datazone [ 1297.491159][T28940] Trying to free block not in datazone [ 1297.496794][T28940] Trying to free block not in datazone [ 1297.557113][T28940] Trying to free block not in datazone [ 1297.562671][T28940] Trying to free block not in datazone [ 1297.574533][T28943] loop1: detected capacity change from 0 to 1024 [ 1297.598012][T28940] minix_free_block (loop3:6): bit already cleared [ 1297.637443][T28940] Trying to free block not in datazone [ 1297.657528][T28940] Trying to free block not in datazone [ 1297.725831][ T60] hfsplus: b-tree write err: -5, ino 4 [ 1298.167098][T28936] loop2: detected capacity change from 0 to 32768 [ 1298.195983][T28936] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 1298.403633][ T5788] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 1299.035642][T28953] loop0: detected capacity change from 0 to 32768 [ 1299.096251][T28953] (syz.0.10123,28953,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1299.149313][T28953] (syz.0.10123,28953,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1299.299316][T28953] JBD2: Ignoring recovery information on journal [ 1299.380943][T28953] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1299.656526][T28996] loop2: detected capacity change from 0 to 256 [ 1299.718706][ T6020] ocfs2: Unmounting device (7,0) on (node local) [ 1299.738601][T28996] FAT-fs (loop2): Directory bread(block 64) failed [ 1299.774740][T28996] FAT-fs (loop2): Directory bread(block 65) failed [ 1299.796127][T28996] FAT-fs (loop2): Directory bread(block 66) failed [ 1299.843251][T28996] FAT-fs (loop2): Directory bread(block 67) failed [ 1299.850014][T28996] FAT-fs (loop2): Directory bread(block 68) failed [ 1299.888694][T28996] FAT-fs (loop2): Directory bread(block 69) failed [ 1299.895417][T28996] FAT-fs (loop2): Directory bread(block 70) failed [ 1299.910089][T28996] FAT-fs (loop2): Directory bread(block 71) failed [ 1299.916882][T28996] FAT-fs (loop2): Directory bread(block 72) failed [ 1299.936492][T28996] FAT-fs (loop2): Directory bread(block 73) failed [ 1299.964350][T29002] loop1: detected capacity change from 0 to 1024 [ 1300.030330][T29002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1300.068912][T29002] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.10148: inode #12: comm syz.1.10148: iget: illegal inode # [ 1300.099879][ T23] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1300.142611][T29002] EXT4-fs (loop1): Remounting filesystem read-only [ 1300.273200][ T6023] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.316681][ T23] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 1300.335058][ T23] usb 4-1: config 0 has no interface number 0 [ 1300.341281][ T23] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1300.416336][ T23] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1300.437504][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.472722][ T23] usb 4-1: Product: syz [ 1300.500554][ T23] usb 4-1: Manufacturer: syz [ 1300.505247][ T23] usb 4-1: SerialNumber: syz [ 1300.539544][ T23] usb 4-1: config 0 descriptor?? [ 1300.556446][T29000] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1300.567456][ T23] usb-storage 4-1:0.20: USB Mass Storage device detected [ 1300.613628][ T23] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1300.828986][T29029] SET target dimension over the limit! [ 1300.882824][ T23] scsi host1: usb-storage 4-1:0.20 [ 1301.024956][T29036] trusted_key: encrypted_key: master key parameter is missing [ 1301.119385][ T23] usb 4-1: USB disconnect, device number 4 [ 1301.281506][T29045] loop0: detected capacity change from 0 to 16 [ 1301.293240][T29045] erofs: (device loop0): mounted with root inode @ nid 36. [ 1301.556908][T29052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10167'. [ 1301.578318][T29052] netlink: 10 bytes leftover after parsing attributes in process `syz.0.10167'. [ 1301.835408][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 1301.835425][ T28] audit: type=1326 audit(2000000118.813:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29061 comm="syz.3.10174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1301.863975][ C1] vkms_vblank_simulate: vblank timer overrun [ 1301.920528][ T28] audit: type=1326 audit(2000000118.851:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29061 comm="syz.3.10174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1301.986993][ T28] audit: type=1326 audit(2000000118.879:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29061 comm="syz.3.10174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1302.101310][ T28] audit: type=1326 audit(2000000118.879:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29061 comm="syz.3.10174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1302.128502][ T28] audit: type=1326 audit(2000000118.879:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29061 comm="syz.3.10174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1302.362122][T29080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10181'. [ 1302.413532][T29080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1302.421852][T29080] IPv6: NLM_F_CREATE should be set when creating new route [ 1302.429224][T29080] IPv6: NLM_F_CREATE should be set when creating new route [ 1302.462906][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.469524][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.987395][T29104] loop1: detected capacity change from 0 to 8 [ 1303.050452][T29104] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1303.082311][ T5788] udevd[5788]: incorrect cramfs checksum on /dev/loop1 [ 1303.109976][T29104] cramfs: Error -5 while decompressing! [ 1303.137038][T29104] cramfs: ffffffff96fda308(26)->ffff888053cd6000(4096) [ 1303.153931][ T5788] udevd[5788]: incorrect cramfs checksum on /dev/loop1 [ 1303.179516][T29104] cramfs: Error -3 while decompressing! [ 1303.192125][T29104] cramfs: ffffffff96fda322(26)->ffff888074023000(4096) [ 1303.199386][T29104] cramfs: Error -3 while decompressing! [ 1303.207865][T29104] cramfs: ffffffff96fda33c(16)->ffff8880580dc000(4096) [ 1303.227796][T29104] cramfs: Error -5 while decompressing! [ 1303.234675][T29104] cramfs: ffffffff96fda308(26)->ffff888053cd6000(4096) [ 1303.241902][ T28] audit: type=1800 audit(2000000120.122:138): pid=29104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10194" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 1304.134586][T29146] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1304.452486][T29159] netlink: 'syz.3.10220': attribute type 27 has an invalid length. [ 1304.920600][T29173] loop0: detected capacity change from 0 to 512 [ 1304.944603][T29173] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1304.989944][T29173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1304.990072][T29173] ext4 filesystem being mounted at /2562/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1305.162912][T29173] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1305.219612][T29173] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1305.249681][T29182] block device autoloading is deprecated and will be removed. [ 1305.288185][T29173] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.10227: Failed to acquire dquot type 0 [ 1305.474134][ T6020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1305.527120][T29187] loop3: detected capacity change from 0 to 1024 [ 1305.557837][T29187] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1305.569588][T29187] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 1305.635266][T29187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1305.985157][ T6024] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1306.094276][T29201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10239'. [ 1306.872576][T29231] libceph: resolve '00' (ret=-3): failed [ 1306.889467][T29233] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1307.112653][T29242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10259'. [ 1307.752388][T29266] cgroup: Invalid name [ 1307.794281][T29267] loop0: detected capacity change from 0 to 1024 [ 1307.854896][T29267] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1307.874583][T29267] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 1307.915730][T29267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1308.001605][T29275] mmap: syz.2.10276 (29275): VmData 175878144 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1308.165119][ T6020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1308.239254][T29279] loop1: detected capacity change from 0 to 4096 [ 1308.270131][T29279] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1308.341763][T29279] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1308.372052][T29286] loop0: detected capacity change from 0 to 64 [ 1308.427240][T29279] ntfs3: loop1: failed to convert "c46c" to cp874 [ 1308.831698][T29297] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1309.072561][T29308] loop2: detected capacity change from 0 to 512 [ 1309.127007][T29308] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1309.193893][T29308] EXT4-fs (loop2): 1 truncate cleaned up [ 1309.212440][T29308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1309.218739][T29309] loop0: detected capacity change from 0 to 2364 [ 1309.232012][T29308] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.10291: Logical block already allocated [ 1309.262528][T29308] EXT4-fs (loop2): Remounting filesystem read-only [ 1309.374037][ T6031] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.084846][T29342] loop3: detected capacity change from 0 to 512 [ 1310.177872][T29342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1310.307309][T29342] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz.3.10307: Directory block failed checksum [ 1310.310935][T29351] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1310.465481][ T6024] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.896570][T29369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10319'. [ 1311.111844][T29377] loop0: detected capacity change from 0 to 512 [ 1311.193060][T29377] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1311.229072][T29377] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 1311.240338][T29377] EXT4-fs (loop0): 1 truncate cleaned up [ 1311.273933][T29377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.315523][T29377] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.10323: Logical block already allocated [ 1311.453871][ T6020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1311.731282][T29392] loop2: detected capacity change from 0 to 8192 [ 1311.737982][T29397] loop3: detected capacity change from 0 to 4096 [ 1311.761272][T29397] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1311.781790][T29392] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1311.812044][T29392] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1311.830551][T29392] REISERFS (device loop2): using ordered data mode [ 1311.839653][T29392] reiserfs: using flush barriers [ 1311.846851][T29392] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1311.885524][T29392] REISERFS (device loop2): checking transaction log (loop2) [ 1311.903648][T29397] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1311.983235][T29392] REISERFS (device loop2): Using r5 hash to sort names [ 1311.990670][T29392] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1312.141110][T29397] ntfs3: loop3: failed to convert "c46c" to cp874 [ 1313.011249][ T28] audit: type=1326 audit(2000000129.249:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29439 comm="syz.2.10354" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bf738ebe9 code=0x0 [ 1313.111545][T29445] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.10356'. [ 1313.201289][T29447] loop2: detected capacity change from 0 to 1024 [ 1313.340823][T29453] loop1: detected capacity change from 0 to 1024 [ 1313.450669][T29457] loop3: detected capacity change from 0 to 256 [ 1313.505396][T29457] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1313.931266][T29469] loop0: detected capacity change from 0 to 164 [ 1313.971071][T29471] netlink: zone id is out of range [ 1314.003217][T29471] netlink: zone id is out of range [ 1314.008419][T29471] netlink: zone id is out of range [ 1314.014484][T29471] netlink: zone id is out of range [ 1314.019798][T29471] netlink: zone id is out of range [ 1314.025915][T29471] netlink: zone id is out of range [ 1314.031608][T29471] netlink: zone id is out of range [ 1314.037358][T29471] netlink: zone id is out of range [ 1314.043290][T29471] netlink: zone id is out of range [ 1314.049545][T29471] netlink: zone id is out of range [ 1314.842857][T29502] loop3: detected capacity change from 0 to 512 [ 1314.936722][T29508] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073072017407) [ 1314.965995][T29508] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1315.002804][T29502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1315.036436][T29502] ext4 filesystem being mounted at /2551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1315.145941][T29517] loop1: detected capacity change from 0 to 256 [ 1315.180980][ T6024] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.220259][T29554] loop2: detected capacity change from 0 to 512 [ 1316.270345][T29554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1316.309778][T29554] ext4 filesystem being mounted at /2556/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1316.576841][ T6031] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.915850][ T28] audit: type=1326 audit(2000000132.905:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29579 comm="syz.3.10419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1316.939875][ T28] audit: type=1326 audit(2000000132.905:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29579 comm="syz.3.10419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1316.996470][ T28] audit: type=1326 audit(2000000132.961:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29579 comm="syz.3.10419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1317.081406][ T28] audit: type=1326 audit(2000000132.961:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29579 comm="syz.3.10419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1317.136658][ T28] audit: type=1326 audit(2000000132.961:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29579 comm="syz.3.10419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92918ebe9 code=0x7ffc0000 [ 1317.231716][ T23] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1317.240193][T29591] loop0: detected capacity change from 0 to 256 [ 1317.257204][T29591] exfat: Deprecated parameter 'namecase' [ 1317.282107][T29591] exfat: Deprecated parameter 'utf8' [ 1317.378182][T29591] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 1317.447242][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 1317.459536][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1317.480391][ T23] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1317.496969][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.523241][ T23] usb 2-1: Product: syz [ 1317.533794][ T23] usb 2-1: Manufacturer: syz [ 1317.545610][ T23] usb 2-1: SerialNumber: syz [ 1317.564131][ T23] usb 2-1: config 0 descriptor?? [ 1317.569994][T29583] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1317.600238][ T23] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input74 [ 1317.873463][T29583] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1317.880087][T29583] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1317.903055][T29605] netlink: 140 bytes leftover after parsing attributes in process `syz.2.10430'. [ 1317.913432][T29583] vhci_hcd vhci_hcd.0: Device attached [ 1317.927157][T29607] vhci_hcd: connection closed [ 1317.931837][ T27] usb 2-1: USB disconnect, device number 18 [ 1317.936666][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1317.957725][ T12] vhci_hcd: stop threads [ 1317.963624][ T12] vhci_hcd: release socket [ 1317.968130][ T12] vhci_hcd: disconnect device [ 1318.777947][T29630] loop3: detected capacity change from 0 to 4096 [ 1319.405040][T29652] loop3: detected capacity change from 0 to 64 [ 1320.394685][T29675] loop0: detected capacity change from 0 to 1024 [ 1320.487469][T29675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1320.593567][T29686] loop3: detected capacity change from 0 to 1024 [ 1320.627020][T29675] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #11: comm syz.0.10463: directory missing '.' [ 1320.709900][ T6020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1321.104577][T29690] loop0: detected capacity change from 0 to 4096 [ 1321.164541][T29699] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1321.645871][T29715] netlink: 'syz.3.10481': attribute type 21 has an invalid length. [ 1322.085564][T29734] netlink: 'syz.3.10490': attribute type 4 has an invalid length. [ 1322.322521][T29745] trusted_key: encrypted_key: keylen parameter is missing [ 1322.378785][T29743] team0: left promiscuous mode [ 1322.383685][T29743] team_slave_0: left promiscuous mode [ 1322.397497][T29743] team_slave_1: left promiscuous mode [ 1322.410523][T29743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1322.465583][T29747] loop3: detected capacity change from 0 to 1024 [ 1322.474328][T29743] net_ratelimit: 337 callbacks suppressed [ 1322.474340][T29743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1322.529651][ T28] audit: type=1326 audit(2000000138.161:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29750 comm="syz.1.10498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8738ebe9 code=0x7ffc0000 [ 1322.594874][ T28] audit: type=1326 audit(2000000138.161:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29750 comm="syz.1.10498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8738ebe9 code=0x7ffc0000 [ 1322.650595][ T28] audit: type=1326 audit(2000000138.161:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29750 comm="syz.1.10498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7efc8738ebe9 code=0x7ffc0000 [ 1322.728180][ T28] audit: type=1326 audit(2000000138.161:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29750 comm="syz.1.10498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8738ebe9 code=0x7ffc0000 [ 1323.107265][T29768] loop0: detected capacity change from 0 to 256 [ 1323.755607][T29784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1324.172376][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1324.211474][T29782] loop3: detected capacity change from 0 to 32768 [ 1324.343406][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1324.392722][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1324.420594][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.455547][ T9] usb 3-1: Product: syz [ 1324.506180][ T9] usb 3-1: Manufacturer: syz [ 1324.532889][ T9] usb 3-1: SerialNumber: syz [ 1324.633690][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1324.675029][T16801] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1324.899917][T29812] netlink: 'syz.3.10529': attribute type 13 has an invalid length. [ 1325.303013][ T27] usb 3-1: USB disconnect, device number 17 [ 1325.631488][T29812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.639488][T29812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.797952][T16801] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1325.824094][T16801] ath9k_htc: Failed to initialize the device [ 1325.841985][ T27] usb 3-1: ath9k_htc: USB layer deinitialized [ 1326.078647][T29812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.133193][T29812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.504772][T29854] xt_limit: Overflow, try lower: 0/0 [ 1326.604734][T29856] sock: sock_timestamping_bind_phc: sock not bind to device [ 1326.635137][T29812] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.646465][T29812] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.657971][T29812] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.668914][T29812] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.927594][T29862] loop2: detected capacity change from 0 to 16 [ 1326.944340][T29862] erofs: (device loop2): mounted with root inode @ nid 36. [ 1327.844227][ T28] audit: type=1400 audit(2000000143.126:149): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":=~" pid=29891 comm="syz.1.10557" [ 1327.891360][T29890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10556'. [ 1327.997595][T29896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1328.268206][T29906] kAFS: unable to lookup cell ' [ 1328.268206][T29906] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 1328.268206][T29906] ' [ 1328.524994][T29918] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1328.652331][T29922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10572'. [ 1328.674262][ T6003] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1328.706763][T29924] netlink: 'syz.0.10573': attribute type 1 has an invalid length. [ 1328.714936][T29924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10573'. [ 1328.888257][ T6003] usb 2-1: Using ep0 maxpacket: 16 [ 1328.906855][ T6003] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1328.935985][ T6003] usb 2-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config [ 1328.962998][ T6003] usb 2-1: config 0 has no interface number 0 [ 1328.997481][ T6003] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1329.019795][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.039840][ T6003] usb 2-1: Product: syz [ 1329.046286][ T6003] usb 2-1: Manufacturer: syz [ 1329.061566][ T6003] usb 2-1: SerialNumber: syz [ 1329.075404][ T6003] usb 2-1: config 0 descriptor?? [ 1329.189878][T29940] netlink: 'syz.2.10581': attribute type 11 has an invalid length. [ 1329.294733][T16801] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1329.326950][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1329.331780][ T6003] usb 2-1: USB disconnect, device number 19 [ 1329.488050][T16801] usb 4-1: Using ep0 maxpacket: 32 [ 1329.506043][T16801] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.535466][T16801] usb 4-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=cc.40 [ 1329.547462][T16801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.551558][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 1329.558649][T16801] usb 4-1: Product: syz [ 1329.568425][T16801] usb 4-1: Manufacturer: syz [ 1329.575857][ T23] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 1329.580000][T16801] usb 4-1: SerialNumber: syz [ 1329.594231][ T23] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.598951][T16801] usb 4-1: config 0 descriptor?? [ 1329.614447][ T23] usb 1-1: config 135 has no interface number 0 [ 1329.623711][T16801] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 1329.626669][ T23] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1329.649120][ T23] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1329.658875][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.667478][ T23] usb 1-1: Product: syz [ 1329.672441][ T23] usb 1-1: Manufacturer: syz [ 1329.677479][ T23] usb 1-1: SerialNumber: syz [ 1329.910996][ T23] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 1329.933529][ T23] usb 1-1: No valid video chain found. [ 1329.952586][ T23] usb 1-1: USB disconnect, device number 6 [ 1330.081384][T16801] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1330.107370][T16801] pac7311: probe of 4-1:0.0 failed with error -71 [ 1330.145727][T16801] usb 4-1: USB disconnect, device number 5 [ 1330.197038][T29959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10590'. [ 1330.208609][T29959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10590'. [ 1330.220756][T29959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10590'. [ 1330.727777][ T6003] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1330.931138][ T6003] usb 3-1: Using ep0 maxpacket: 32 [ 1330.947843][ T6003] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1331.003908][ T6003] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1331.067395][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.138417][ T6003] usb 3-1: Product: syz [ 1331.142889][ T6003] usb 3-1: Manufacturer: syz [ 1331.154909][T29977] bond4: entered allmulticast mode [ 1331.162275][ T6003] usb 3-1: SerialNumber: syz [ 1331.196147][ T6003] usb 3-1: config 0 descriptor?? [ 1331.232262][T29966] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1331.256531][ T6003] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input75 [ 1331.663827][T29990] loop3: detected capacity change from 0 to 8192 [ 1331.729479][T29990] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1331.769628][T29990] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1331.779848][T29990] REISERFS (device loop3): using ordered data mode [ 1331.787005][T29990] reiserfs: using flush barriers [ 1331.794929][T29990] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1331.812435][T29966] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1331.820878][T29966] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1331.824341][T29990] REISERFS (device loop3): checking transaction log (loop3) [ 1331.880548][T29966] vhci_hcd vhci_hcd.0: Device attached [ 1331.968592][T29821] usb 3-1: USB disconnect, device number 18 [ 1331.968645][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1331.984719][T29998] vhci_hcd: connection closed [ 1332.021919][T28199] vhci_hcd: stop threads [ 1332.064606][T28199] vhci_hcd: release socket [ 1332.097633][T28199] vhci_hcd: disconnect device [ 1332.117885][T29832] vhci_hcd: vhci_device speed not set [ 1332.190122][T29990] REISERFS (device loop3): Using tea hash to sort names [ 1332.203726][T29839] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1332.223450][T29990] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 1332.242027][T29990] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1332.449576][T29839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1332.459690][T29839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1332.503817][T29839] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1332.534500][T29839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.569590][T29839] usb 2-1: config 0 descriptor?? [ 1332.821234][T29839] ath6kl: Failed to submit usb control message: -71 [ 1332.851894][T29839] ath6kl: unable to send the bmi data to the device: -71 [ 1332.867453][T29839] ath6kl: Unable to send get target info: -71 [ 1332.881630][T29839] ath6kl: Failed to init ath6kl core: -71 [ 1332.902799][T29839] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1332.937996][T29839] usb 2-1: USB disconnect, device number 20 [ 1333.391214][T30038] loop0: detected capacity change from 0 to 2048 [ 1333.429196][T30038] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1333.561497][ T28] audit: type=1800 audit(2000000148.456:150): pid=30038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10626" name="file2" dev="loop0" ino=1347 res=0 errno=0 [ 1333.791033][T30050] loop2: detected capacity change from 0 to 256 [ 1333.948788][T30050] FAT-fs (loop2): Directory bread(block 64) failed [ 1333.956515][T30050] FAT-fs (loop2): Directory bread(block 65) failed [ 1334.001354][T30050] FAT-fs (loop2): Directory bread(block 66) failed [ 1334.008581][T30050] FAT-fs (loop2): Directory bread(block 67) failed [ 1334.030066][T30050] FAT-fs (loop2): Directory bread(block 68) failed [ 1334.053453][T30050] FAT-fs (loop2): Directory bread(block 69) failed [ 1334.061327][T30050] FAT-fs (loop2): Directory bread(block 70) failed [ 1334.081650][T30050] FAT-fs (loop2): Directory bread(block 71) failed [ 1334.092717][T30050] FAT-fs (loop2): Directory bread(block 72) failed [ 1334.124478][T30050] FAT-fs (loop2): Directory bread(block 73) failed [ 1334.595073][T30074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10644'. [ 1334.955430][T30090] netlink: 188 bytes leftover after parsing attributes in process `syz.2.10653'. [ 1335.743088][T29832] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1335.801426][T30116] tmpfs: Group quota inode hardlimit too large. [ 1335.881232][T30096] loop3: detected capacity change from 0 to 32768 [ 1335.957016][T29832] usb 1-1: Using ep0 maxpacket: 32 [ 1335.968597][T30096] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1335.983927][T29832] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1336.024936][T29832] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 1336.042730][T29832] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.063945][T29832] usb 1-1: config 7 has no interface number 0 [ 1336.073592][T29832] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1336.088967][T29832] usb 1-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1336.107112][T29832] usb 1-1: config 7 interface 187 has no altsetting 0 [ 1336.118009][T29832] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1336.133369][T29832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.154262][T29832] usb 1-1: Product: syz [ 1336.158582][T29832] usb 1-1: Manufacturer: syz [ 1336.171299][T29832] usb 1-1: SerialNumber: syz [ 1336.241851][T30096] XFS (loop3): Ending clean mount [ 1336.267593][T30096] XFS (loop3): Quotacheck needed: Please wait. [ 1336.389086][T30096] XFS (loop3): Quotacheck: Done. [ 1336.467157][T29832] usb 1-1: Limiting number of CPorts to U8_MAX [ 1336.506307][T29832] usb 1-1: Unknown endpoint type found, address 0x07 [ 1336.546308][T29832] usb 1-1: Not enough endpoints found in device, aborting! [ 1336.715182][ T6024] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1336.750656][T29822] usb 1-1: USB disconnect, device number 7 [ 1337.089741][T30146] loop2: detected capacity change from 0 to 4096 [ 1337.122772][ T6003] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1337.135050][T30146] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1337.193359][T30148] xt_cgroup: invalid path, errno=-2 [ 1337.326059][ T6003] usb 2-1: Using ep0 maxpacket: 16 [ 1337.374116][ T6003] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1337.431771][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.451084][ T6003] usb 2-1: Product: syz [ 1337.456630][ T6003] usb 2-1: Manufacturer: syz [ 1337.466686][ T6003] usb 2-1: SerialNumber: syz [ 1337.497886][ T6003] r8152-cfgselector 2-1: config 0 descriptor?? [ 1337.957957][ T6003] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1337.972456][ T6003] r8152-cfgselector 2-1: USB disconnect, device number 21 [ 1338.109047][T30172] syz.0.10690 uses old SIOCAX25GETINFO [ 1338.502251][T30186] vivid-004: disconnect [ 1338.527218][T30185] vivid-004: reconnect [ 1338.751753][T30193] xt_hashlimit: invalid interval [ 1339.032699][T30202] netlink: 'syz.1.10705': attribute type 3 has an invalid length. [ 1339.099689][T30204] loop0: detected capacity change from 0 to 64 [ 1339.139152][T30182] loop3: detected capacity change from 0 to 32768 [ 1339.186998][T30182] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.10694 (30182) [ 1339.226610][T30182] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1339.239188][T30204] Trying to free block not in datazone [ 1339.251587][T30204] Trying to free block not in datazone [ 1339.259508][T30182] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1339.288267][T30182] BTRFS info (device loop3): metadata ratio 2 [ 1339.349590][T30182] BTRFS info (device loop3): allowing degraded mounts [ 1339.356465][T30182] BTRFS info (device loop3): force zlib compression, level 3 [ 1339.391009][T30182] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1339.415065][T30182] BTRFS info (device loop3): use zstd compression, level 3 [ 1339.432123][T30182] BTRFS info (device loop3): force clearing of disk cache [ 1339.469652][T30182] BTRFS info (device loop3): max_inline at 0 [ 1339.489855][T30182] BTRFS info (device loop3): using free space tree [ 1339.713842][T30230] loop0: detected capacity change from 0 to 1024 [ 1339.785886][T30182] BTRFS info (device loop3): enabling ssd optimizations [ 1339.847281][T30182] BTRFS info (device loop3): rebuilding free space tree [ 1340.051172][T28199] hfsplus: b-tree write err: -5, ino 4 [ 1340.095718][T30182] BTRFS error (device loop3: state M): unrecognized mount option 'ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ë(c—oö—ÈŽ‡Æl2vJËÿÿÿÿÿÿÿÿÿ' [ 1340.340438][ T6024] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1340.611127][ T5788] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (5788) [ 1340.978278][T30265] vxcan1 speed is unknown, defaulting to 1000 [ 1341.755127][T30291] loop2: detected capacity change from 0 to 8 [ 1342.497708][T30316] loop3: detected capacity change from 0 to 1024 [ 1342.588474][T30316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1342.637398][T30316] ext4 filesystem being mounted at /2629/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1342.760514][ T6024] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.316605][T30347] tmpfs: Bad value for 'nr_blocks' [ 1343.576153][T30356] loop3: detected capacity change from 0 to 256 [ 1343.645516][T30356] exfat: Deprecated parameter 'namecase' [ 1343.728898][T30356] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xeb999a00, utbl_chksum : 0xe619d30d) [ 1343.856491][T30362] loop0: detected capacity change from 0 to 512 [ 1343.909994][T30362] EXT4-fs: Ignoring removed nobh option [ 1344.035124][T30362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1344.080517][T30362] ext4 filesystem being mounted at /2705/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1344.146983][T30345] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1344.170145][T30362] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.10770: corrupted xattr block 33: bad e_name length [ 1344.256788][T30362] [ 1344.259637][T30362] ====================================================== [ 1344.267571][T30362] WARNING: possible circular locking dependency detected [ 1344.274933][T30362] syzkaller #0 Not tainted [ 1344.279392][T30362] ------------------------------------------------------ [ 1344.286480][T30362] syz.0.10770/30362 is trying to acquire lock: [ 1344.293627][T30362] ffff888073f1de68 (&dquot->dq_lock){+.+.}-{3:3}, at: dqget+0x6fc/0xeb0 [ 1344.302626][T30362] [ 1344.302626][T30362] but task is already holding lock: [ 1344.312381][T30362] ffff888073f450c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_setattr+0x86b/0x1c90 [ 1344.322923][T30362] [ 1344.322923][T30362] which lock already depends on the new lock. [ 1344.322923][T30362] [ 1344.333893][T30362] [ 1344.333893][T30362] the existing dependency chain (in reverse order) is: [ 1344.343033][T30362] [ 1344.343033][T30362] -> #5 (&ei->xattr_sem){++++}-{3:3}: [ 1344.350670][T30362] down_read+0x46/0x2e0 [ 1344.355575][T30362] ext4_setattr+0x86b/0x1c90 [ 1344.363699][T30362] notify_change+0xb0d/0xe10 [ 1344.369211][T30362] chown_common+0x3f9/0x5a0 [ 1344.375340][T30362] do_fchownat+0x168/0x270 [ 1344.380352][T30362] __x64_sys_chown+0x82/0x90 [ 1344.385557][T30362] do_syscall_64+0x55/0xb0 [ 1344.390553][T30362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1344.397385][T30362] [ 1344.397385][T30362] -> #4 (jbd2_handle){++++}-{0:0}: [ 1344.405382][T30362] start_this_handle+0x1e9d/0x20c0 [ 1344.411151][T30362] jbd2__journal_start+0x2bb/0x5b0 [ 1344.416832][T30362] jbd2_journal_start+0x2a/0x40 [ 1344.422777][T30362] ocfs2_start_trans+0x376/0x6c0 [ 1344.428407][T30362] ocfs2_modify_bh+0xe9/0x470 [ 1344.433653][T30362] ocfs2_local_read_info+0x13fd/0x1770 [ 1344.439677][T30362] dquot_load_quota_sb+0x757/0xb80 [ 1344.445364][T30362] dquot_load_quota_inode+0x2dc/0x5d0 [ 1344.451321][T30362] ocfs2_enable_quotas+0x1c7/0x440 [ 1344.457968][T30362] ocfs2_fill_super+0x3f6d/0x4d90 [ 1344.463726][T30362] mount_bdev+0x22b/0x2d0 [ 1344.468598][T30362] legacy_get_tree+0xea/0x180 [ 1344.473812][T30362] vfs_get_tree+0x8c/0x280 [ 1344.478763][T30362] do_new_mount+0x24b/0xa40 [ 1344.483825][T30362] __se_sys_mount+0x2da/0x3c0 [ 1344.489038][T30362] do_syscall_64+0x55/0xb0 [ 1344.493995][T30362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1344.500434][T30362] [ 1344.500434][T30362] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1344.509330][T30362] down_read+0x46/0x2e0 [ 1344.514047][T30362] ocfs2_start_trans+0x36a/0x6c0 [ 1344.519541][T30362] ocfs2_modify_bh+0xe9/0x470 [ 1344.524751][T30362] ocfs2_local_read_info+0x13fd/0x1770 [ 1344.530763][T30362] dquot_load_quota_sb+0x757/0xb80 [ 1344.536427][T30362] dquot_load_quota_inode+0x2dc/0x5d0 [ 1344.542514][T30362] ocfs2_enable_quotas+0x1c7/0x440 [ 1344.548160][T30362] ocfs2_fill_super+0x3f6d/0x4d90 [ 1344.553717][T30362] mount_bdev+0x22b/0x2d0 [ 1344.559483][T30362] legacy_get_tree+0xea/0x180 [ 1344.564712][T30362] vfs_get_tree+0x8c/0x280 [ 1344.569802][T30362] do_new_mount+0x24b/0xa40 [ 1344.575696][T30362] __se_sys_mount+0x2da/0x3c0 [ 1344.582158][T30362] do_syscall_64+0x55/0xb0 [ 1344.587132][T30362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1344.595201][T30362] [ 1344.595201][T30362] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 1344.607354][T30362] ocfs2_start_trans+0x26b/0x6c0 [ 1344.613652][T30362] ocfs2_acquire_dquot+0x67b/0xaf0 [ 1344.619321][T30362] dqget+0x77c/0xeb0 [ 1344.624382][T30362] dquot_set_dqblk+0x2b/0xf90 [ 1344.631169][T30362] quota_setquota+0x4b0/0x530 [ 1344.636407][T30362] __se_sys_quotactl+0x27b/0x950 [ 1344.642101][T30362] do_syscall_64+0x55/0xb0 [ 1344.648727][T30362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1344.655180][T30362] [ 1344.655180][T30362] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 1344.664584][T30362] down_write+0x97/0x1f0 [ 1344.670012][T30362] ocfs2_create_local_dquot+0x1a4/0x1790 [ 1344.676816][T30362] ocfs2_acquire_dquot+0x7cf/0xaf0 [ 1344.682516][T30362] dqget+0x77c/0xeb0 [ 1344.688625][T30362] dquot_set_dqblk+0x2b/0xf90 [ 1344.693852][T30362] quota_setquota+0x4b0/0x530 [ 1344.699136][T30362] __se_sys_quotactl+0x27b/0x950 [ 1344.705171][T30362] do_syscall_64+0x55/0xb0 [ 1344.710936][T30362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1344.717382][T30362] [ 1344.717382][T30362] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 1344.725231][T30362] __lock_acquire+0x2ddb/0x7c80 [ 1344.730642][T30362] lock_acquire+0x197/0x410 [ 1344.736034][T30362] __mutex_lock+0x129/0xcc0 [ 1344.741621][T30362] dqget+0x6fc/0xeb0 [ 1344.747182][T30362] dquot_transfer+0x2f9/0x6d0 [ 1344.752436][T30362] ext4_setattr+0x87d/0x1c90 [ 1344.757578][T30362] notify_change+0xb0d/0xe10 [ 1344.762715][T30362] chown_common+0x3f9/0x5a0 [ 1344.767863][T30362] do_fchownat+0x168/0x270 [ 1344.773973][T30362] __x64_sys_lchown+0x85/0x90 [ 1344.779230][T30362] do_syscall_64+0x55/0xb0 [ 1344.784273][T30362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1344.790714][T30362] [ 1344.790714][T30362] other info that might help us debug this: [ 1344.790714][T30362] [ 1344.801056][T30362] Chain exists of: [ 1344.801056][T30362] &dquot->dq_lock --> jbd2_handle --> &ei->xattr_sem [ 1344.801056][T30362] [ 1344.813982][T30362] Possible unsafe locking scenario: [ 1344.813982][T30362] [ 1344.821477][T30362] CPU0 CPU1 [ 1344.826871][T30362] ---- ---- [ 1344.832270][T30362] rlock(&ei->xattr_sem); [ 1344.836897][T30362] lock(jbd2_handle); [ 1344.844054][T30362] lock(&ei->xattr_sem); [ 1344.851459][T30362] lock(&dquot->dq_lock); [ 1344.855912][T30362] [ 1344.855912][T30362] *** DEADLOCK *** [ 1344.855912][T30362] [ 1344.864265][T30362] 3 locks held by syz.0.10770/30362: [ 1344.869588][T30362] #0: ffff88807d72e418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1344.878888][T30362] #1: ffff888073f45410 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: chown_common+0x313/0x5a0 [ 1344.890143][T30362] #2: ffff888073f450c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_setattr+0x86b/0x1c90 [ 1344.900557][T30362] [ 1344.900557][T30362] stack backtrace: [ 1344.907029][T30362] CPU: 0 PID: 30362 Comm: syz.0.10770 Not tainted syzkaller #0 [ 1344.914688][T30362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1344.924852][T30362] Call Trace: [ 1344.928149][T30362] [ 1344.931097][T30362] dump_stack_lvl+0x16c/0x230 [ 1344.935800][T30362] ? load_image+0x3b0/0x3b0 [ 1344.940323][T30362] ? show_regs_print_info+0x20/0x20 [ 1344.945544][T30362] ? print_circular_bug+0x12b/0x1a0 [ 1344.950757][T30362] check_noncircular+0x2bd/0x3c0 [ 1344.955710][T30362] ? look_up_lock_class+0x75/0x140 [ 1344.960856][T30362] ? print_deadlock_bug+0x5d0/0x5d0 [ 1344.966522][T30362] ? lockdep_lock+0xe0/0x220 [ 1344.971247][T30362] ? _find_first_zero_bit+0xd3/0x100 [ 1344.976755][T30362] __lock_acquire+0x2ddb/0x7c80 [ 1344.981748][T30362] ? mark_lock+0x94/0x320 [ 1344.986097][T30362] ? verify_lock_unused+0x140/0x140 [ 1344.991400][T30362] ? __lock_acquire+0x1334/0x7c80 [ 1344.996461][T30362] lock_acquire+0x197/0x410 [ 1345.000984][T30362] ? dqget+0x6fc/0xeb0 [ 1345.005075][T30362] ? __might_sleep+0xe0/0xe0 [ 1345.009682][T30362] ? read_lock_is_recursive+0x20/0x20 [ 1345.015070][T30362] ? mark_lock+0x94/0x320 [ 1345.019422][T30362] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1345.025460][T30362] __mutex_lock+0x129/0xcc0 [ 1345.030867][T30362] ? dqget+0x6fc/0xeb0 [ 1345.035077][T30362] ? percpu_counter_add_batch+0x1d9/0x280 [ 1345.040866][T30362] ? lockdep_hardirqs_on+0x98/0x150 [ 1345.046284][T30362] ? percpu_counter_add_batch+0x22b/0x280 [ 1345.052171][T30362] ? dqget+0x6fc/0xeb0 [ 1345.056278][T30362] ? mutex_lock_nested+0x20/0x20 [ 1345.061243][T30362] ? percpu_counter_set+0x1a0/0x1a0 [ 1345.066481][T30362] ? make_kuid+0x640/0x640 [ 1345.071908][T30362] ? do_raw_spin_unlock+0x121/0x230 [ 1345.077770][T30362] dqget+0x6fc/0xeb0 [ 1345.081995][T30362] dquot_transfer+0x2f9/0x6d0 [ 1345.088218][T30362] ? __dquot_transfer+0x22f0/0x22f0 [ 1345.094773][T30362] ? down_read+0x1ac/0x2e0 [ 1345.099312][T30362] ext4_setattr+0x87d/0x1c90 [ 1345.103935][T30362] ? evm_inode_setattr+0x94/0x6a0 [ 1345.110507][T30362] ? bpf_lsm_inode_setattr+0x9/0x10 [ 1345.115957][T30362] ? try_break_deleg+0x79/0x120 [ 1345.121876][T30362] ? ext4_write_inode+0x550/0x550 [ 1345.127190][T30362] notify_change+0xb0d/0xe10 [ 1345.133212][T30362] chown_common+0x3f9/0x5a0 [ 1345.137759][T30362] ? __ia32_sys_chmod+0x70/0x70 [ 1345.142666][T30362] ? rcu_read_lock_any_held+0xb4/0x120 [ 1345.149841][T30362] ? __mnt_want_write+0x223/0x2a0 [ 1345.155620][T30362] do_fchownat+0x168/0x270 [ 1345.161159][T30362] ? chown_common+0x5a0/0x5a0 [ 1345.166046][T30362] __x64_sys_lchown+0x85/0x90 [ 1345.171629][T30362] do_syscall_64+0x55/0xb0 [ 1345.176082][T30362] ? clear_bhb_loop+0x40/0x90 [ 1345.180974][T30362] ? clear_bhb_loop+0x40/0x90 [ 1345.186749][T30362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1345.192779][T30362] RIP: 0033:0x7f764578ebe9 [ 1345.197217][T30362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1345.220051][T30362] RSP: 002b:00007f76466b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1345.229278][T30362] RAX: ffffffffffffffda RBX: 00007f76459c5fa0 RCX: 00007f764578ebe9 [ 1345.237285][T30362] RDX: ffffffffffffffff RSI: 000000000000ee01 RDI: 0000200000000080 [ 1345.245368][T30362] RBP: 00007f7645811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1345.255211][T30362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1345.264257][T30362] R13: 00007f76459c6038 R14: 00007f76459c5fa0 R15: 00007ffc0629f828 [ 1345.272637][T30362] [ 1345.322630][T30362] EXT4-fs error (device loop0): ext4_get_inode_usage:901: inode #15: comm syz.0.10770: corrupted xattr block 33: bad e_name length [ 1345.388419][ T6020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.411462][T30368] loop1: detected capacity change from 0 to 32768