last executing test programs: 3.147628418s ago: executing program 0 (id=939): shutdown(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905850140"], 0x0) 2.648982958s ago: executing program 4 (id=947): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x3000000, @rand_addr=' \x01\x00', 0x5}}}, 0x88) 2.615252911s ago: executing program 4 (id=949): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ipv6_route\x00') lseek(r0, 0x36, 0x1) 2.450009518s ago: executing program 4 (id=952): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) vmsplice(r0, &(0x7f000000a740)=[{0xfffffffffffffffd}], 0x1, 0x5) 2.317241061s ago: executing program 4 (id=956): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x4848e}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2e}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 2.229567149s ago: executing program 2 (id=958): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@s={0x5, @SEQ_MIDIPUTC=0xb8, 0x9, 0x10}) 2.194535763s ago: executing program 4 (id=960): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x880, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f696e6c696e655f78617474722c6163746976655f6c6f67733d342c646973636172642c6661756c745f696e6a656374696f6e3d30303030303030303030303030303034313136302c6661756c745f747970653d30303030303030303030303030303030303737302c6d6f64653d6c66732c696e6c696e655f646174612c66617374626f6f742c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c00cb"], 0x21, 0x5548, &(0x7f00000058c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) 2.165089746s ago: executing program 2 (id=961): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x80, 0x30, 0x51b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x80}}, 0x0) 2.060865766s ago: executing program 2 (id=964): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000240)=@keyring) 1.954831276s ago: executing program 2 (id=966): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x100000}}) 1.797084522s ago: executing program 2 (id=969): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) 1.706026411s ago: executing program 2 (id=970): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003210000002103"], 0x0, 0x0}, 0x0) 1.474876974s ago: executing program 0 (id=973): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@usrquota}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.355683045s ago: executing program 1 (id=975): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000800850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.327875578s ago: executing program 3 (id=976): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000240)=@keyring) 1.302148531s ago: executing program 1 (id=977): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000340)={0xfff, 0x2, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'batadv_slave_0\x00'}) 1.293957851s ago: executing program 3 (id=978): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)=':,::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14= next_index [ 68.084610][ T4386] find_entry called with index >= next_index [ 68.381719][ T4409] loop2: detected capacity change from 0 to 4096 [ 68.464471][ T4409] ntfs: (device loop2): parse_options(): Unrecognized mount option r. [ 68.483354][ T4409] ntfs: (device loop2): parse_options(): Unrecognized mount option shortname. [ 68.518263][ T4409] ntfs: (device loop2): parse_options(): Unrecognized mount option uni_xlate. [ 68.538090][ T4399] loop1: detected capacity change from 0 to 32768 [ 68.547643][ T4409] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 68.628268][ T4409] ntfs: (device loop2): parse_options(): Unrecognized mount option nonumtail. [ 68.673178][ T4399] ======================================================= [ 68.673178][ T4399] WARNING: The mand mount option has been deprecated and [ 68.673178][ T4399] and is ignored by this kernel. Remove the mand [ 68.673178][ T4399] option from the mount to silence this warning. [ 68.673178][ T4399] ======================================================= [ 68.708211][ C0] vkms_vblank_simulate: vblank timer overrun [ 68.718545][ T4409] ntfs: (device loop2): parse_options(): Unrecognized mount option shortname. [ 68.758576][ T4409] ntfs: (device loop2): parse_options(): Unrecognized mount option nnonumtail. [ 68.818405][ T4409] ntfs: (device loop2): parse_options(): Unrecognized mount option shortname. [ 68.848134][ T4409] ntfs: (device loop2): parse_options(): Unrecognized mount option rodir. [ 68.877495][ T4409] ntfs: (device loop2): parse_options(): Unrecognized mount option dos1xfloppy. [ 68.996731][ T4399] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 69.028287][ T4239] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.201931][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 69.261362][ T4444] loop0: detected capacity change from 0 to 2048 [ 69.316479][ T4444] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 69.316479][ T4444] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 69.316479][ T4444] [ 69.374710][ T4444] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.389542][ T4239] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.416566][ T4239] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.468702][ T4239] usb 4-1: config 1 interface 1 has no altsetting 1 [ 69.492312][ T4444] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,nobarrier,nouser_xattr,dioread_nolock,. Quota mode: writeback. [ 69.638647][ T4239] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.647744][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.674075][ T4239] usb 4-1: Product: syz [ 69.691384][ T4239] usb 4-1: Manufacturer: syz [ 69.716176][ T4239] usb 4-1: SerialNumber: syz [ 69.731531][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 69.757722][ T4467] device bridge_slave_1 left promiscuous mode [ 69.798025][ T4467] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.834089][ T4239] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 69.855479][ T4239] cdc_ncm 4-1:1.0: bind() failure [ 69.862385][ T4473] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 69.885769][ T4239] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 69.899709][ T4467] device bridge_slave_0 left promiscuous mode [ 69.916210][ T4239] cdc_ncm 4-1:1.1: bind() failure [ 69.924716][ T4467] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.997041][ T4475] nftables ruleset with unbound chain [ 70.036768][ T4238] usb 4-1: USB disconnect, device number 2 [ 70.317449][ T4485] loop2: detected capacity change from 0 to 512 [ 70.337043][ T4488] netlink: 'syz.1.90': attribute type 32 has an invalid length. [ 70.380890][ T4485] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 70.415625][ T4492] ipt_ECN: cannot use operation on non-tcp rule [ 70.426297][ T4485] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.468428][ T4485] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.91: Block bitmap for bg 0 marked uninitialized [ 70.491904][ T4496] loop1: detected capacity change from 0 to 2048 [ 70.535229][ T4485] EXT4-fs (loop2): Remounting filesystem read-only [ 70.567096][ T4485] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 70.589683][ T4496] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.604405][ T4500] loop0: detected capacity change from 0 to 164 [ 70.634635][ T4496] Invalid option length (0) for dns_resolver key [ 70.645121][ T4485] EXT4-fs (loop2): Remounting filesystem read-only [ 70.664714][ T4499] loop4: detected capacity change from 0 to 4096 [ 70.686219][ T4504] loop3: detected capacity change from 0 to 256 [ 70.690393][ T4485] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.91: Block bitmap for bg 0 marked uninitialized [ 70.707875][ T4485] EXT4-fs (loop2): Remounting filesystem read-only [ 70.731526][ T4499] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 70.746071][ T4485] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 70.786080][ T4504] FAT-fs (loop3): Directory bread(block 64) failed [ 70.796705][ T4504] FAT-fs (loop3): Directory bread(block 65) failed [ 70.803466][ T4485] EXT4-fs (loop2): Remounting filesystem read-only [ 70.819062][ T4485] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.91: Block bitmap for bg 0 marked uninitialized [ 70.839884][ T4504] FAT-fs (loop3): Directory bread(block 66) failed [ 70.883399][ T4504] FAT-fs (loop3): Directory bread(block 67) failed [ 70.899644][ T4485] EXT4-fs (loop2): Remounting filesystem read-only [ 70.906235][ T4485] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 70.917296][ T4504] FAT-fs (loop3): Directory bread(block 68) failed [ 70.931074][ T4485] EXT4-fs (loop2): Remounting filesystem read-only [ 70.941292][ T4485] EXT4-fs (loop2): 1 orphan inode deleted [ 70.947060][ T4485] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,. Quota mode: none. [ 70.950002][ T4504] FAT-fs (loop3): Directory bread(block 69) failed [ 70.975885][ T4504] FAT-fs (loop3): Directory bread(block 70) failed [ 71.004623][ T4504] FAT-fs (loop3): Directory bread(block 71) failed [ 71.021573][ T4504] FAT-fs (loop3): Directory bread(block 72) failed [ 71.094243][ T4485] process 'syz.2.91' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 71.099241][ T4504] FAT-fs (loop3): Directory bread(block 73) failed [ 71.221569][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.228283][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.387180][ T4522] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 71.488709][ T4522] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 72.146543][ T4521] loop2: detected capacity change from 0 to 32768 [ 72.187338][ T4554] netlink: 36 bytes leftover after parsing attributes in process `syz.0.122'. [ 72.188576][ T4238] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.211909][ T4554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.122'. [ 72.291189][ T4521] JBD2: Ignoring recovery information on journal [ 72.420290][ T4521] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 72.504174][ T4521] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 72.504279][ T4521] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 72.533084][ T4570] loop0: detected capacity change from 0 to 16 [ 72.558745][ T4521] OCFS2: Returning error to the calling process. [ 72.565556][ T4521] (syz.2.104,4521,1):ocfs2_setattr:1302 ERROR: status = -117 [ 72.578574][ T4238] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.603929][ T4238] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 72.623544][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.645269][ T4570] erofs: (device loop0): mounted with root inode @ nid 36. [ 72.660453][ T4238] usb 5-1: config 0 descriptor?? [ 72.697834][ T4570] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 281474976710655 [ 72.709148][ T4238] gspca_main: spca501-2.14.0 probing 0000:0000 [ 72.719012][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 72.954810][ T4552] loop1: detected capacity change from 0 to 32768 [ 72.962454][ T4572] loop2: detected capacity change from 0 to 4096 [ 73.030427][ T4572] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 73.054873][ T4552] jfs_mkdir: dtInsert returned -EIO [ 73.095186][ T4552] ERROR: (device loop1): jfs_mkdir: [ 73.095186][ T4552] [ 73.133106][ T4552] ERROR: (device loop1): remounting filesystem as read-only [ 73.148348][ T4238] gspca_spca501: reg write: error -71 [ 73.155663][ T4238] spca501 5-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 73.206705][ T4238] spca501: probe of 5-1:0.0 failed with error -22 [ 73.265534][ T4238] usb 5-1: USB disconnect, device number 2 [ 73.395199][ T4569] loop3: detected capacity change from 0 to 32768 [ 73.513196][ T4569] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 73.513196][ T4569] [ 73.596909][ T4569] ERROR: (device loop3): remounting filesystem as read-only [ 73.638257][ T4569] ialloc: diAlloc returned -5! [ 73.684454][ T4592] proc: Bad value for 'gid' [ 73.738014][ T4594] loop2: detected capacity change from 0 to 1024 [ 73.793419][ T4596] capability: warning: `syz.4.142' uses deprecated v2 capabilities in a way that may be insecure [ 73.993541][ T4604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.146'. [ 74.075914][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 74.075931][ T26] audit: type=1800 audit(1761014243.540:2): pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.140" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 74.150882][ T4608] netlink: 'syz.0.147': attribute type 9 has an invalid length. [ 74.200608][ T4271] hfsplus: b-tree write err: -5, ino 4 [ 74.233093][ T4608] netlink: 'syz.0.147': attribute type 7 has an invalid length. [ 74.255949][ T4611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 74.266410][ T4608] netlink: 'syz.0.147': attribute type 8 has an invalid length. [ 74.754892][ T4642] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 74.795948][ T4642] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 75.092856][ T4664] netlink: 'syz.4.175': attribute type 44 has an invalid length. [ 75.157870][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 75.325981][ T4674] netlink: 80 bytes leftover after parsing attributes in process `syz.2.182'. [ 75.426207][ T4673] loop4: detected capacity change from 0 to 4096 [ 75.572123][ T4673] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 75.601169][ T4673] ntfs3: loop4: Failed to load $Extend. [ 75.687578][ T4680] loop0: detected capacity change from 0 to 8192 [ 75.741923][ T4680] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 75.902445][ T4680] REISERFS (device loop0): using ordered data mode [ 75.918530][ T4680] reiserfs: using flush barriers [ 75.926948][ T4680] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.959137][ T4680] REISERFS (device loop0): checking transaction log (loop0) [ 75.991523][ T4680] REISERFS (device loop0): Using r5 hash to sort names [ 76.001995][ T4680] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 76.033277][ T4685] loop3: detected capacity change from 0 to 32768 [ 76.130734][ T4685] JBD2: Ignoring recovery information on journal [ 76.143415][ T4702] loop4: detected capacity change from 0 to 1024 [ 76.252115][ T4685] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 76.303157][ T26] audit: type=1800 audit(1761014245.770:3): pid=4702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.190" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 76.304934][ T4705] loop1: detected capacity change from 0 to 1024 [ 76.352131][ T4707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 76.409417][ T364] hfsplus: b-tree write err: -5, ino 4 [ 76.456096][ T4685] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 76.456126][ T4685] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 76.487866][ T4685] OCFS2: Returning error to the calling process. [ 76.526321][ T4685] (syz.3.187,4685,1):ocfs2_setattr:1302 ERROR: status = -117 [ 76.573548][ T4271] hfsplus: b-tree write err: -5, ino 4 [ 76.695081][ T4715] netlink: 'syz.1.199': attribute type 1 has an invalid length. [ 76.738723][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 76.755824][ T4715] netlink: 228 bytes leftover after parsing attributes in process `syz.1.199'. [ 76.955207][ T4720] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 77.005405][ T4731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.205'. [ 77.535262][ T4757] loop1: detected capacity change from 0 to 256 [ 77.552226][ T4714] loop4: detected capacity change from 0 to 40427 [ 77.587352][ T4759] loop0: detected capacity change from 0 to 1024 [ 77.617840][ T4714] F2FS-fs (loop4): build fault injection attr: rate: 4, type: 0x1ffff [ 77.631499][ T4255] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.631530][ T4714] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 77.679086][ T4714] F2FS-fs (loop4): invalid crc value [ 77.696767][ T4714] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x14e/0x440 [ 77.707190][ T26] audit: type=1800 audit(1761014247.160:4): pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.215" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 77.752190][ T4714] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0xa30 [ 77.772785][ T4714] F2FS-fs (loop4): Found nat_bits in checkpoint [ 77.794610][ T4336] hfsplus: b-tree write err: -5, ino 4 [ 77.877068][ T4714] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0xa30 [ 77.898492][ T4255] usb 4-1: Using ep0 maxpacket: 16 [ 77.921973][ T4714] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0xa30 [ 77.954452][ T4714] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x14e/0x440 [ 77.998596][ T4714] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 78.048411][ T4255] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 78.065012][ T4255] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.076482][ T4714] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xd6/0x560 [ 78.095579][ T4255] usb 4-1: config 0 has no interface number 0 [ 78.270411][ T4197] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x66/0x1b0 [ 78.321659][ T4255] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 78.355410][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.369259][ T4255] usb 4-1: Product: syz [ 78.373470][ T4255] usb 4-1: Manufacturer: syz [ 78.408204][ T4255] usb 4-1: SerialNumber: syz [ 78.434811][ T4255] usb 4-1: config 0 descriptor?? [ 78.489835][ T4790] loop2: detected capacity change from 0 to 512 [ 78.526221][ T4255] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 78.536203][ T4255] usb 4-1: No valid video chain found. [ 78.571047][ T4790] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.760641][ T4255] usb 4-1: USB disconnect, device number 3 [ 79.170386][ T4821] loop1: detected capacity change from 0 to 1024 [ 79.585585][ T4833] netlink: 'syz.1.252': attribute type 3 has an invalid length. [ 79.688502][ T4835] loop3: detected capacity change from 0 to 2048 [ 79.717753][ T4835] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.915993][ T4817] loop0: detected capacity change from 0 to 32768 [ 79.926658][ T4851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.986467][ T4817] JBD2: Ignoring recovery information on journal [ 80.147602][ T4817] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 80.220842][ T4817] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 80.220874][ T4817] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 80.278690][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.303978][ T4817] OCFS2: Returning error to the calling process. [ 80.337305][ T4817] (syz.0.242,4817,1):ocfs2_setattr:1302 ERROR: status = -117 [ 80.449491][ T4183] ocfs2: Unmounting device (7,0) on (node local) [ 80.476133][ T4877] loop4: detected capacity change from 0 to 1024 [ 80.534691][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 80.546140][ T4875] loop1: detected capacity change from 0 to 8192 [ 80.848703][ T13] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 80.857930][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.877696][ T13] usb 4-1: Product: syz [ 80.886698][ T13] usb 4-1: Manufacturer: syz [ 80.897133][ T13] usb 4-1: SerialNumber: syz [ 80.907790][ T13] usb 4-1: config 0 descriptor?? [ 81.208854][ T13] usb-storage 4-1:0.0: USB Mass Storage device detected [ 81.448042][ T13] usb 4-1: USB disconnect, device number 4 [ 81.485629][ T1108] cfg80211: failed to load regulatory.db [ 82.024571][ T4940] loop4: detected capacity change from 0 to 4096 [ 82.061913][ T4940] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 82.165896][ T4940] ntfs3: loop4: failed to convert "c46c" to maccyrillic [ 82.408450][ T4266] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 82.511345][ T4960] loop2: detected capacity change from 0 to 1024 [ 82.589356][ T4960] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.634766][ T4960] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.688348][ T4266] usb 4-1: Using ep0 maxpacket: 16 [ 82.700906][ T4965] loop4: detected capacity change from 0 to 2048 [ 82.728898][ T4291] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 82.730416][ T4960] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.313: directory missing '..' [ 82.810883][ T4965] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.857029][ T4965] Invalid option length (0) for dns_resolver key [ 83.028506][ T4266] usb 4-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 83.047248][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.068785][ T4266] usb 4-1: Product: syz [ 83.078308][ T4266] usb 4-1: Manufacturer: syz [ 83.083554][ T4266] usb 4-1: SerialNumber: syz [ 83.098419][ T4291] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x73, skipping [ 83.125676][ T4266] usb 4-1: config 0 descriptor?? [ 83.294675][ T4291] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 83.324187][ T4291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.333169][ T4291] usb 2-1: Product: syz [ 83.337362][ T4291] usb 2-1: Manufacturer: syz [ 83.343205][ T4291] usb 2-1: SerialNumber: syz [ 83.357989][ T4291] usb 2-1: config 0 descriptor?? [ 83.400076][ T4291] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 83.407163][ T4291] pegasus_notetaker: probe of 2-1:0.0 failed with error -22 [ 83.414957][ T4988] loop0: detected capacity change from 0 to 4096 [ 83.441616][ T4266] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 83.459955][ T4266] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22 [ 83.470904][ T4988] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 83.491405][ T4266] usb 4-1: USB disconnect, device number 5 [ 83.605285][ T4988] ntfs3: loop0: failed to convert "c46c" to maccyrillic [ 83.617701][ T4225] usb 2-1: USB disconnect, device number 2 [ 83.693590][ T4986] loop4: detected capacity change from 0 to 32768 [ 83.788739][ T4986] XFS (loop4): Mounting V5 Filesystem [ 83.976352][ T5006] loop0: detected capacity change from 0 to 512 [ 83.996114][ T5006] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 84.024612][ T4986] XFS (loop4): Ending clean mount [ 84.091831][ T5006] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000000000800,discard,,errors=continue. Quota mode: writeback. [ 84.109837][ T5006] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.109981][ T4197] XFS (loop4): Unmounting Filesystem [ 84.333230][ T5014] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 85.084936][ T5050] loop3: detected capacity change from 0 to 512 [ 85.193358][ T5050] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.379348][ T5062] netlink: 36 bytes leftover after parsing attributes in process `syz.1.352'. [ 85.804392][ T5080] program syz.4.363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.840958][ T5084] loop1: detected capacity change from 0 to 256 [ 85.916353][ T5088] netlink: 176 bytes leftover after parsing attributes in process `syz.3.366'. [ 85.986860][ T5084] FAT-fs (loop1): Directory bread(block 64) failed [ 86.003567][ T5084] FAT-fs (loop1): Directory bread(block 65) failed [ 86.036566][ T5084] FAT-fs (loop1): Directory bread(block 66) failed [ 86.078305][ T5084] FAT-fs (loop1): Directory bread(block 67) failed [ 86.084945][ T5084] FAT-fs (loop1): Directory bread(block 68) failed [ 86.145362][ T5084] FAT-fs (loop1): Directory bread(block 69) failed [ 86.157364][ T5092] loop4: detected capacity change from 0 to 4096 [ 86.168609][ T5084] FAT-fs (loop1): Directory bread(block 70) failed [ 86.175345][ T5084] FAT-fs (loop1): Directory bread(block 71) failed [ 86.204441][ T5084] FAT-fs (loop1): Directory bread(block 72) failed [ 86.217364][ T5084] FAT-fs (loop1): Directory bread(block 73) failed [ 86.242229][ T5092] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 86.273436][ T5100] Cannot find add_set index 3 as target [ 86.408327][ T4225] Bluetooth: hci0: command 0x080f tx timeout [ 86.887535][ T5114] loop3: detected capacity change from 0 to 4096 [ 86.888341][ T5074] loop2: detected capacity change from 0 to 40427 [ 86.898319][ T4239] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.952818][ T5114] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 86.986813][ T5074] F2FS-fs (loop2): invalid crc value [ 87.022155][ T5074] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.052093][ T5122] xt_TCPMSS: Only works on TCP SYN packets [ 87.148307][ T4239] usb 2-1: Using ep0 maxpacket: 8 [ 87.249071][ T5074] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 87.255839][ T5074] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 87.268460][ T4239] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 87.286086][ T5074] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 87.316540][ T4239] usb 2-1: config 179 has no interface number 0 [ 87.333314][ T4239] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 87.361466][ T4239] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 87.394855][ T4239] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 87.408457][ T4239] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 87.428456][ T4239] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 87.451620][ T4239] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 87.471764][ T4239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.528595][ T5110] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 87.615533][ T5139] loop3: detected capacity change from 0 to 164 [ 87.974382][ T4238] usb 2-1: USB disconnect, device number 3 [ 87.988253][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 88.005198][ T5145] netlink: 'syz.0.395': attribute type 1 has an invalid length. [ 88.030533][ T5145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 88.314165][ T5160] loop4: detected capacity change from 0 to 2048 [ 88.393391][ T5160] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.421077][ T5164] loop2: detected capacity change from 0 to 4096 [ 88.465525][ T5164] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 88.998412][ T4255] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.249018][ T4255] usb 5-1: Using ep0 maxpacket: 16 [ 89.280003][ T5198] loop0: detected capacity change from 0 to 4096 [ 89.299311][ T5207] loop1: detected capacity change from 0 to 256 [ 89.324740][ T5198] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 89.381554][ T5213] loop2: detected capacity change from 0 to 128 [ 89.402529][ T4255] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 89.426864][ T5207] FAT-fs (loop1): Directory bread(block 64) failed [ 89.440392][ T4255] usb 5-1: config 0 has no interface number 0 [ 89.450289][ T5213] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.478289][ T5207] FAT-fs (loop1): Directory bread(block 65) failed [ 89.484947][ T4255] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 89.510425][ T5207] FAT-fs (loop1): Directory bread(block 66) failed [ 89.518597][ T5207] FAT-fs (loop1): Directory bread(block 67) failed [ 89.567408][ T5207] FAT-fs (loop1): Directory bread(block 68) failed [ 89.595151][ T5207] FAT-fs (loop1): Directory bread(block 69) failed [ 89.602469][ T5207] FAT-fs (loop1): Directory bread(block 70) failed [ 89.609834][ T5207] FAT-fs (loop1): Directory bread(block 71) failed [ 89.616445][ T5207] FAT-fs (loop1): Directory bread(block 72) failed [ 89.623180][ T5207] FAT-fs (loop1): Directory bread(block 73) failed [ 89.698628][ T4255] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 89.729393][ T4255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.757992][ T4255] usb 5-1: Product: syz [ 89.772760][ T4255] usb 5-1: Manufacturer: syz [ 89.777390][ T4255] usb 5-1: SerialNumber: syz [ 89.802835][ T4255] usb 5-1: config 0 descriptor?? [ 90.021213][ T5234] program syz.0.436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.261803][ T5245] netlink: 'syz.0.439': attribute type 7 has an invalid length. [ 90.276639][ T5245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.439'. [ 90.279223][ T4255] usbtouchscreen: probe of 5-1:0.214 failed with error -71 [ 90.308451][ T4255] usb 5-1: USB disconnect, device number 3 [ 90.470978][ T5253] loop0: detected capacity change from 0 to 256 [ 90.523670][ T5229] loop2: detected capacity change from 0 to 32768 [ 90.594652][ T5229] add_index: next_index = 0. Resetting! [ 90.625949][ T5229] find_entry called with index >= next_index [ 90.664671][ T5229] find_entry called with index >= next_index [ 90.740767][ T5265] netlink: 32 bytes leftover after parsing attributes in process `syz.1.448'. [ 90.910101][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 91.035137][ T5277] netlink: 'syz.3.454': attribute type 21 has an invalid length. [ 91.080888][ T5277] netlink: 128 bytes leftover after parsing attributes in process `syz.3.454'. [ 91.105129][ T5277] netlink: 'syz.3.454': attribute type 4 has an invalid length. [ 91.137471][ T5277] netlink: 'syz.3.454': attribute type 3 has an invalid length. [ 91.154693][ T5277] netlink: 3 bytes leftover after parsing attributes in process `syz.3.454'. [ 91.195293][ T5283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 91.221866][ T5283] device bridge_slave_1 left promiscuous mode [ 91.245718][ T5287] SET target dimension over the limit! [ 91.276873][ T5283] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.378637][ T5283] device bridge_slave_0 left promiscuous mode [ 91.404317][ T5283] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.439273][ T5290] loop2: detected capacity change from 0 to 4096 [ 91.491147][ T5290] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 91.511973][ T5293] netlink: 76 bytes leftover after parsing attributes in process `syz.4.462'. [ 91.542019][ T5293] netlink: 72 bytes leftover after parsing attributes in process `syz.4.462'. [ 91.578512][ T5293] netlink: 'syz.4.462': attribute type 3 has an invalid length. [ 91.583849][ T5290] ntfs3: loop2: failed to convert "c46c" to maciceland [ 91.591047][ T5293] netlink: 11 bytes leftover after parsing attributes in process `syz.4.462'. [ 91.728382][ T4291] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 91.796002][ T5300] loop4: detected capacity change from 0 to 512 [ 91.847093][ T26] audit: type=1400 audit(1761014261.310:5): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5304 comm="syz.0.468" [ 91.847321][ T5300] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.926664][ T5300] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 91.954400][ T5300] EXT4-fs error (device loop4): mb_free_blocks:1860: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 91.978284][ T4291] usb 4-1: Using ep0 maxpacket: 16 [ 92.085189][ T5300] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #11: comm syz.4.466: corrupted inode contents [ 92.098601][ T4291] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 92.106829][ T4291] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 92.162425][ T4291] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 92.183344][ T5300] EXT4-fs error (device loop4): ext4_dirty_inode:6046: inode #11: comm syz.4.466: mark_inode_dirty error [ 92.196852][ T4291] usb 4-1: config 0 has no interface number 0 [ 92.203320][ T4291] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 92.214971][ T4291] usb 4-1: config 0 interface 104 has no altsetting 1 [ 92.222154][ T5300] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.466: invalid indirect mapped block 1 (level 1) [ 92.239063][ T5300] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #11: comm syz.4.466: corrupted inode contents [ 92.254701][ T5300] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 92.287909][ T5300] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #11: comm syz.4.466: corrupted inode contents [ 92.308083][ T5300] EXT4-fs error (device loop4): ext4_truncate:4279: inode #11: comm syz.4.466: mark_inode_dirty error [ 92.374471][ T5300] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 92.386113][ T5301] loop1: detected capacity change from 0 to 32768 [ 92.398415][ T4291] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 92.400487][ T5300] EXT4-fs (loop4): 1 truncate cleaned up [ 92.407477][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.432160][ T5300] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.446676][ T4291] usb 4-1: Product: syz [ 92.456571][ T4291] usb 4-1: Manufacturer: syz [ 92.478236][ T4291] usb 4-1: SerialNumber: syz [ 92.499218][ T4291] usb 4-1: config 0 descriptor?? [ 92.544313][ T5301] XFS (loop1): Mounting V5 Filesystem [ 92.758508][ T4291] asix 4-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 92.778383][ T4291] asix: probe of 4-1:0.104 failed with error -71 [ 92.797480][ T4291] usb 4-1: USB disconnect, device number 6 [ 92.848197][ T5301] XFS (loop1): Ending clean mount [ 92.956031][ T4187] XFS (loop1): Unmounting Filesystem [ 93.186728][ T5350] loop4: detected capacity change from 0 to 4096 [ 93.213333][ T4266] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.239273][ T5355] loop2: detected capacity change from 0 to 8 [ 93.257143][ T5350] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 93.422747][ T5355] SQUASHFS error: Failed to read block 0x1ec: -5 [ 93.442256][ T5355] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 93.572759][ T5365] loop1: detected capacity change from 0 to 164 [ 93.598532][ T4266] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 93.607270][ T4266] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.621534][ T4266] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 93.663783][ T5365] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 93.667869][ T4266] usb 1-1: config 1 has no interface number 1 [ 93.694409][ T5371] loop2: detected capacity change from 0 to 256 [ 93.701332][ T4266] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 93.732381][ T4266] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 93.743808][ T4266] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 93.918394][ T5376] netlink: 76 bytes leftover after parsing attributes in process `syz.3.498'. [ 93.951668][ T5376] netlink: 72 bytes leftover after parsing attributes in process `syz.3.498'. [ 93.963357][ T4266] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.982939][ T4266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.996630][ T5376] netlink: 'syz.3.498': attribute type 3 has an invalid length. [ 94.004839][ T4266] usb 1-1: Product: syz [ 94.020972][ T4266] usb 1-1: Manufacturer: syz [ 94.025836][ T4266] usb 1-1: SerialNumber: syz [ 94.035905][ T5381] loop2: detected capacity change from 0 to 256 [ 94.037319][ T5376] netlink: 11 bytes leftover after parsing attributes in process `syz.3.498'. [ 94.067929][ T5383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'. [ 94.208410][ T5381] FAT-fs (loop2): Directory bread(block 64) failed [ 94.215002][ T5381] FAT-fs (loop2): Directory bread(block 65) failed [ 94.258325][ T5381] FAT-fs (loop2): Directory bread(block 66) failed [ 94.265087][ T5381] FAT-fs (loop2): Directory bread(block 67) failed [ 94.295569][ T5381] FAT-fs (loop2): Directory bread(block 68) failed [ 94.318266][ T5381] FAT-fs (loop2): Directory bread(block 69) failed [ 94.325058][ T5381] FAT-fs (loop2): Directory bread(block 70) failed [ 94.347999][ T5395] loop1: detected capacity change from 0 to 512 [ 94.364407][ T5381] FAT-fs (loop2): Directory bread(block 71) failed [ 94.378782][ T5381] FAT-fs (loop2): Directory bread(block 72) failed [ 94.387239][ T5397] loop3: detected capacity change from 0 to 164 [ 94.393714][ T5381] FAT-fs (loop2): Directory bread(block 73) failed [ 94.425800][ T5395] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 94.483725][ T5397] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 94.485428][ T4266] usb 1-1: USB disconnect, device number 3 [ 94.543909][ T5395] EXT4-fs error (device loop1): mb_free_blocks:1860: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 94.589688][ T5395] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #11: comm syz.1.518: corrupted inode contents [ 94.615269][ T5395] EXT4-fs error (device loop1): ext4_dirty_inode:6046: inode #11: comm syz.1.518: mark_inode_dirty error [ 94.668054][ T5395] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.518: invalid indirect mapped block 1 (level 1) [ 94.703049][ T5395] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #11: comm syz.1.518: corrupted inode contents [ 94.765152][ T5395] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 94.794738][ T5395] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #11: comm syz.1.518: corrupted inode contents [ 94.843703][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.854922][ T5395] EXT4-fs error (device loop1): ext4_truncate:4279: inode #11: comm syz.1.518: mark_inode_dirty error [ 94.877886][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.895875][ T5395] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 94.962996][ T5395] EXT4-fs (loop1): 1 truncate cleaned up [ 94.976607][ T5395] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.054094][ T5416] netlink: 'syz.0.515': attribute type 3 has an invalid length. [ 95.376089][ T5442] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 95.549788][ T5454] netlink: 'syz.1.534': attribute type 3 has an invalid length. [ 95.775311][ T5468] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 95.850817][ T5472] loop4: detected capacity change from 0 to 512 [ 95.873408][ T5472] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.901083][ T5470] loop0: detected capacity change from 0 to 1024 [ 95.925943][ T5472] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.932699][ T4239] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.013260][ T5470] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.044468][ T5440] loop3: detected capacity change from 0 to 32768 [ 96.051451][ T5472] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz.4.545: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 96.073718][ T5472] EXT4-fs error (device loop4): ext4_quota_enable:6420: comm syz.4.545: Bad quota inode: 3, type: 0 [ 96.086699][ T5472] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 96.102439][ T5472] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 96.114055][ T5472] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.208284][ T4239] usb 3-1: Using ep0 maxpacket: 16 [ 96.272119][ T5440] XFS (loop3): Mounting V5 Filesystem [ 96.456481][ T5440] XFS (loop3): Ending clean mount [ 96.498483][ T4239] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 96.527946][ T4239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.548892][ T5502] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 96.584191][ T4239] usb 3-1: Product: syz [ 96.596424][ T4239] usb 3-1: Manufacturer: syz [ 96.620920][ T4189] XFS (loop3): Unmounting Filesystem [ 96.636876][ T4239] usb 3-1: SerialNumber: syz [ 96.671878][ T4239] usb 3-1: config 0 descriptor?? [ 96.750798][ T5512] loop1: detected capacity change from 0 to 128 [ 96.789709][ T5512] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.805941][ T5514] loop4: detected capacity change from 0 to 512 [ 96.846047][ T26] audit: type=1800 audit(1761014266.310:6): pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.561" name="file2" dev="loop1" ino=1048593 res=0 errno=0 [ 96.918582][ T4239] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 96.926016][ T4239] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 96.937635][ T26] audit: type=1326 audit(1761014266.400:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.1.564" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb95086fc9 code=0x0 [ 96.999328][ T5514] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.080197][ T5523] loop1: detected capacity change from 0 to 8 [ 97.117566][ T5514] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.146261][ T4239] usb 3-1: USB disconnect, device number 2 [ 97.242166][ T5523] SQUASHFS error: Failed to read block 0x1ec: -5 [ 97.245519][ T5514] EXT4-fs (loop4): 1 truncate cleaned up [ 97.254298][ T5514] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nombcache,debug_want_extra_isize=0x0000000000000068,i_version,nodiscard,nodioread_nolock,,errors=continue. Quota mode: none. [ 97.264599][ T5523] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 97.327998][ T5531] __nla_validate_parse: 8 callbacks suppressed [ 97.328012][ T5531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.569'. [ 97.586557][ T5541] loop1: detected capacity change from 0 to 1024 [ 97.724921][ T5547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.754479][ T5549] loop3: detected capacity change from 0 to 256 [ 97.920074][ T5549] FAT-fs (loop3): Directory bread(block 64) failed [ 97.967305][ T5549] FAT-fs (loop3): Directory bread(block 65) failed [ 97.984698][ T5549] FAT-fs (loop3): Directory bread(block 66) failed [ 98.002191][ T5549] FAT-fs (loop3): Directory bread(block 67) failed [ 98.025754][ T5549] FAT-fs (loop3): Directory bread(block 68) failed [ 98.081080][ T5549] FAT-fs (loop3): Directory bread(block 69) failed [ 98.102485][ T5549] FAT-fs (loop3): Directory bread(block 70) failed [ 98.111629][ T5549] FAT-fs (loop3): Directory bread(block 71) failed [ 98.119312][ T5549] FAT-fs (loop3): Directory bread(block 72) failed [ 98.126546][ T5549] FAT-fs (loop3): Directory bread(block 73) failed [ 98.255172][ T5533] loop0: detected capacity change from 0 to 32768 [ 98.407097][ T5533] XFS (loop0): Mounting V5 Filesystem [ 98.431538][ T5579] loop4: detected capacity change from 0 to 24 [ 98.528891][ T5579] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 98.587647][ T5579] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 98.687464][ T5579] romfs: read error for inode 0x70040 [ 98.698774][ T5533] XFS (loop0): Ending clean mount [ 98.723196][ T5568] loop1: detected capacity change from 0 to 32768 [ 98.929378][ T5602] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 98.937162][ T5602] netlink: 'syz.3.598': attribute type 2 has an invalid length. [ 98.967479][ T5568] XFS (loop1): Mounting V5 Filesystem [ 98.991110][ T4183] XFS (loop0): Unmounting Filesystem [ 99.240094][ T5568] XFS (loop1): Ending clean mount [ 99.266173][ T5568] XFS (loop1): Quotacheck needed: Please wait. [ 99.438225][ T5568] XFS (loop1): Quotacheck: Done. [ 99.492883][ T5629] loop3: detected capacity change from 0 to 128 [ 99.646488][ T4187] XFS (loop1): Unmounting Filesystem [ 99.656584][ T5637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.600'. [ 99.667003][ T5637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.600'. [ 100.138958][ T5665] netlink: 80 bytes leftover after parsing attributes in process `syz.3.628'. [ 100.251596][ T5673] netlink: 'syz.3.631': attribute type 12 has an invalid length. [ 100.289287][ T5673] netlink: 132 bytes leftover after parsing attributes in process `syz.3.631'. [ 100.309420][ T5678] loop2: detected capacity change from 0 to 128 [ 100.343905][ T5678] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.399323][ T5683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'. [ 100.415539][ T26] audit: type=1800 audit(1761014269.880:8): pid=5678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.632" name="file2" dev="loop2" ino=1048595 res=0 errno=0 [ 100.457964][ T5688] loop3: detected capacity change from 0 to 256 [ 100.485178][ T5689] loop1: detected capacity change from 0 to 1764 [ 100.701670][ T5701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.805391][ T5711] netlink: 'syz.3.649': attribute type 2 has an invalid length. [ 100.837316][ T5710] loop1: detected capacity change from 0 to 2048 [ 100.849012][ T5711] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.649'. [ 100.960655][ T5710] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.971655][ T5710] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.389833][ T5749] netlink: 'syz.1.665': attribute type 10 has an invalid length. [ 101.444366][ T5749] netlink: 'syz.1.665': attribute type 49 has an invalid length. [ 101.596100][ T5765] loop4: detected capacity change from 0 to 256 [ 101.963412][ T5774] loop1: detected capacity change from 0 to 2048 [ 102.064395][ T5774] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,acl,,errors=continue. Quota mode: none. [ 102.185647][ T5763] loop3: detected capacity change from 0 to 32768 [ 102.416477][ T5763] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 102.466452][ T5753] loop0: detected capacity change from 0 to 32768 [ 102.569001][ T5753] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 102.601799][ T5753] (syz.0.667,5753,0):ocfs2_init_local_system_inodes:493 ERROR: status=-22, sysfile=10, slot=0 [ 102.613050][ T5753] (syz.0.667,5753,0):ocfs2_init_local_system_inodes:502 ERROR: status = -22 [ 102.622777][ T5800] loop1: detected capacity change from 0 to 256 [ 102.624145][ T5753] (syz.0.667,5753,0):ocfs2_mount_volume:1818 ERROR: status = -22 [ 102.647512][ T5763] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1 [ 102.652642][ T5753] (syz.0.667,5753,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.706705][ T5800] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.729975][ T5800] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 102.742066][ T5763] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 102.798394][ T5763] OCFS2: File system is now read-only. [ 102.814276][ T5763] (syz.3.683,5763,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 102.846125][ T5800] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 102.854924][ T5763] (syz.3.683,5763,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 102.914647][ T5763] (syz.3.683,5763,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 102.943571][ T5763] (syz.3.683,5763,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 102.964810][ T5810] netlink: 100 bytes leftover after parsing attributes in process `syz.4.693'. [ 103.009194][ T5800] exFAT-fs (loop1): failed to exfat_utf8_to_utf16 (estr:ENAMETOOLONG) nls len : 262, unilen : 257 > 255 [ 103.018329][ T5763] (syz.3.683,5763,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 103.029149][ T5810] netlink: 100 bytes leftover after parsing attributes in process `syz.4.693'. [ 103.058814][ T5763] (syz.3.683,5763,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 103.067126][ T5813] netlink: 'syz.2.694': attribute type 2 has an invalid length. [ 103.095218][ T5763] (syz.3.683,5763,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 103.102893][ T5813] netlink: 'syz.2.694': attribute type 8 has an invalid length. [ 103.104701][ T5813] netlink: 132 bytes leftover after parsing attributes in process `syz.2.694'. [ 103.147723][ T5763] (syz.3.683,5763,0):ocfs2_mknod:385 ERROR: status = -30 [ 103.172948][ T5763] (syz.3.683,5763,0):ocfs2_mknod:502 ERROR: status = -30 [ 103.241850][ T5763] (syz.3.683,5763,0):ocfs2_create:676 ERROR: status = -30 [ 103.426138][ T4189] (syz-executor,4189,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 103.452291][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 103.637092][ T5841] netlink: 'syz.4.708': attribute type 8 has an invalid length. [ 103.639855][ T5840] loop0: detected capacity change from 0 to 256 [ 104.359335][ T5873] loop0: detected capacity change from 0 to 4096 [ 104.498459][ T1335] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 104.838926][ T5909] netlink: 232 bytes leftover after parsing attributes in process `syz.3.742'. [ 104.868449][ T1335] usb 5-1: config 0 has an invalid interface number: 3 but max is 2 [ 104.886691][ T1335] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 104.918658][ T1335] usb 5-1: config 0 has no interface number 1 [ 104.939515][ T1335] usb 5-1: config 0 has no interface number 2 [ 104.959471][ T1335] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 104.991990][ T1335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.025264][ T1335] usb 5-1: config 0 descriptor?? [ 105.297290][ T5937] loop1: detected capacity change from 0 to 1024 [ 105.304117][ T1335] qcserial 5-1:0.3: Qualcomm USB modem converter detected [ 105.412509][ T5945] loop2: detected capacity change from 0 to 256 [ 105.445605][ T5949] loop3: detected capacity change from 0 to 64 [ 105.472873][ T5951] usb usb8: usbfs: process 5951 (syz.0.762) did not claim interface 0 before use [ 105.537886][ T5945] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 105.539263][ T4239] usb 5-1: USB disconnect, device number 4 [ 105.563227][ T5945] FAT-fs (loop2): Filesystem has been set read-only [ 105.570115][ T4239] qcserial 5-1:0.3: device disconnected [ 105.582913][ T5945] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 105.600379][ T5955] loop0: detected capacity change from 0 to 1024 [ 105.607649][ T5945] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 105.622817][ T5945] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 105.633431][ T5945] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 105.678369][ T5945] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 105.717719][ T5945] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 105.744110][ T5945] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 105.760255][ T5945] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 105.772092][ T5962] mip6: mip6_destopt_init_state: spi is not 0: 1114112 [ 105.777581][ T5945] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 105.807188][ T26] audit: type=1800 audit(1761014275.270:9): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.758" name="file1" dev="loop2" ino=1048600 res=0 errno=0 [ 105.818983][ T5945] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 105.936292][ T5971] loop1: detected capacity change from 0 to 256 [ 105.940854][ T5945] syz.2.758 (5945) used greatest stack depth: 20144 bytes left [ 105.974030][ T5974] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 106.101756][ T5980] netlink: 'syz.0.775': attribute type 2 has an invalid length. [ 106.153639][ T5980] netlink: 'syz.0.775': attribute type 8 has an invalid length. [ 106.198519][ T5980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.775'. [ 106.353786][ T5999] loop3: detected capacity change from 0 to 64 [ 106.442732][ T6005] Unsupported ieee802154 address type: 0 [ 106.449362][ T5999] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 106.507058][ T5999] minix_free_inode: bit 4 already cleared [ 106.730120][ T6019] loop1: detected capacity change from 0 to 256 [ 106.850116][ T6024] loop3: detected capacity change from 0 to 512 [ 106.878003][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 106.921780][ T6024] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.967229][ T6024] EXT4-fs (loop3): 1 truncate cleaned up [ 107.029786][ T6024] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.074899][ T5995] loop2: detected capacity change from 0 to 32768 [ 107.215353][ T6042] sctp: [Deprecated]: syz.0.803 (pid 6042) Use of int in max_burst socket option deprecated. [ 107.215353][ T6042] Use struct sctp_assoc_value instead [ 107.230219][ T6043] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 107.251417][ T5995] XFS (loop2): Mounting V5 Filesystem [ 107.277968][ T6021] loop4: detected capacity change from 0 to 32768 [ 107.377991][ T6050] loop3: detected capacity change from 0 to 4096 [ 107.378522][ T6021] (syz.4.796,6021,1):ocfs2_init_local_system_inodes:493 ERROR: status=-22, sysfile=10, slot=0 [ 107.407742][ T6021] (syz.4.796,6021,1):ocfs2_init_local_system_inodes:502 ERROR: status = -22 [ 107.423314][ T6053] netlink: 96 bytes leftover after parsing attributes in process `syz.0.805'. [ 107.436938][ T6021] (syz.4.796,6021,1):ocfs2_mount_volume:1818 ERROR: status = -22 [ 107.440218][ T5995] XFS (loop2): Ending clean mount [ 107.472459][ T6021] (syz.4.796,6021,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 107.493206][ T5995] XFS (loop2): Quotacheck needed: Please wait. [ 107.628465][ T5995] XFS (loop2): Quotacheck: Done. [ 107.861338][ T4188] XFS (loop2): Unmounting Filesystem [ 108.082620][ T6021] blk_update_request: I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.640840][ T6088] loop0: detected capacity change from 0 to 512 [ 108.647462][ T6091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.823'. [ 108.777304][ T6099] netlink: 52 bytes leftover after parsing attributes in process `syz.2.828'. [ 108.791502][ T6088] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.850147][ T6088] EXT4-fs (loop0): 1 truncate cleaned up [ 108.881678][ T6088] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.048511][ T4255] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.274001][ T6118] comedi comedi0: Minor 3 could not be opened [ 109.288800][ T6122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.839'. [ 109.303936][ T6120] dlm: dev_write: no op 0 74000000000000 [ 109.348335][ T4255] usb 2-1: Using ep0 maxpacket: 32 [ 109.377689][ T6126] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.478292][ T4255] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.502395][ T6132] loop4: detected capacity change from 0 to 1024 [ 109.515202][ T4255] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 109.539237][ T4266] Bluetooth: hci4: command 0x0407 tx timeout [ 109.577802][ T6132] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 109.623646][ T6140] tmpfs: Bad value for 'mpol' [ 109.647670][ T6142] loop3: detected capacity change from 0 to 8 [ 109.664726][ T6132] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 109.693578][ T6132] System zones: 0-1, 4-36, 102-102 [ 109.734913][ T6132] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 109.758723][ T4255] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 109.774834][ T6147] comedi comedi1: Minor 12032 is invalid! [ 109.780812][ T4255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.824906][ T4255] usb 2-1: Product: syz [ 109.839426][ T4255] usb 2-1: Manufacturer: syz [ 109.844072][ T4255] usb 2-1: SerialNumber: syz [ 109.880026][ T4255] usb 2-1: config 0 descriptor?? [ 110.135374][ T6165] loop3: detected capacity change from 0 to 256 [ 110.158135][ T4255] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 110.166956][ T4255] f6 f2 2c 05 00 00 00 00 [ 110.180584][ T4255] snd-usb-6fire: probe of 2-1:0.0 failed with error -5 [ 110.277811][ T6165] FAT-fs (loop3): Directory bread(block 64) failed [ 110.294876][ T6165] FAT-fs (loop3): Directory bread(block 65) failed [ 110.304484][ T6165] FAT-fs (loop3): Directory bread(block 66) failed [ 110.338364][ T6165] FAT-fs (loop3): Directory bread(block 67) failed [ 110.360531][ T6165] FAT-fs (loop3): Directory bread(block 68) failed [ 110.387470][ T6165] FAT-fs (loop3): Directory bread(block 69) failed [ 110.387807][ T4255] usb 2-1: USB disconnect, device number 4 [ 110.407795][ T6165] FAT-fs (loop3): Directory bread(block 70) failed [ 110.438306][ T6165] FAT-fs (loop3): Directory bread(block 71) failed [ 110.458544][ T6165] FAT-fs (loop3): Directory bread(block 72) failed [ 110.465117][ T6165] FAT-fs (loop3): Directory bread(block 73) failed [ 110.513245][ T6183] loop2: detected capacity change from 0 to 512 [ 110.534358][ T6183] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.597473][ T6183] EXT4-fs (loop2): 1 truncate cleaned up [ 110.615431][ T6183] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.906660][ T6180] loop4: detected capacity change from 0 to 32768 [ 110.984370][ T6180] XFS: noikeep mount option is deprecated. [ 111.119927][ T6180] XFS (loop4): Mounting V5 Filesystem [ 111.219142][ T6180] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 111.264357][ T6180] XFS (loop4): Starting recovery (logdev: internal) [ 111.317795][ T6180] XFS (loop4): Ending recovery (logdev: internal) [ 111.378495][ T4255] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.486127][ T4197] XFS (loop4): Unmounting Filesystem [ 111.700276][ T6236] netlink: 168 bytes leftover after parsing attributes in process `syz.2.890'. [ 111.791181][ T4255] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 111.805130][ T4255] usb 1-1: config 0 has no interface number 0 [ 111.817021][ T4255] usb 1-1: config 0 interface 130 altsetting 0 endpoint 0x8B has an invalid bInterval 68, changing to 10 [ 111.842414][ T4255] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e2.ca [ 111.858984][ T6240] tmpfs: Bad value for 'mpol' [ 111.867418][ T4255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.907319][ T4255] usb 1-1: config 0 descriptor?? [ 111.980410][ T4255] usb 1-1: Found UVC 0.00 device (8086:0b5b) [ 111.995217][ T4255] usb 1-1: No valid video chain found. [ 112.003461][ T6244] netlink: 'syz.1.895': attribute type 29 has an invalid length. [ 112.015558][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 112.054431][ T6244] netlink: 'syz.1.895': attribute type 29 has an invalid length. [ 112.072694][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 112.073824][ T6246] netlink: 'syz.2.897': attribute type 1 has an invalid length. [ 112.206534][ T4266] usb 1-1: USB disconnect, device number 4 [ 112.317737][ T6256] loop1: detected capacity change from 0 to 1024 [ 112.437828][ T6256] hfsplus: invalid xattr key length: 0 [ 112.828294][ T4255] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 112.847075][ T6288] netlink: 'syz.0.915': attribute type 8 has an invalid length. [ 112.858652][ T6288] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.915'. [ 113.229636][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 113.285782][ T4266] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 113.301765][ T6317] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 113.308536][ T4255] usb 2-1: unable to get BOS descriptor or descriptor too short [ 113.378666][ T4255] usb 2-1: not running at top speed; connect to a high speed hub [ 113.399136][ T6320] loop0: detected capacity change from 0 to 256 [ 113.417213][ T6285] loop4: detected capacity change from 0 to 32768 [ 113.463357][ T6320] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 113.476169][ T6320] FAT-fs (loop0): Filesystem has been set read-only [ 113.481652][ T6324] loop2: detected capacity change from 0 to 256 [ 113.484841][ T4255] usb 2-1: config 3 has an invalid interface number: 146 but max is 0 [ 113.497890][ T6320] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 113.506941][ T4255] usb 2-1: config 3 has no interface number 0 [ 113.513941][ T4255] usb 2-1: config 3 interface 146 has no altsetting 0 [ 113.520942][ T6320] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 113.531348][ T6320] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 113.540337][ T6320] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 113.549356][ T6320] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 113.559096][ T6320] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 113.570909][ T6285] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 113.583237][ T6320] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 113.593528][ T6320] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 113.604778][ T6320] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 113.616107][ T26] audit: type=1800 audit(1761014283.080:10): pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.931" name="file1" dev="loop0" ino=1048607 res=0 errno=0 [ 113.639216][ T6320] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 113.686606][ T6285] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1 [ 113.707882][ T6285] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 113.718427][ T4255] usb 2-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=56.ea [ 113.726262][ T6324] FAT-fs (loop2): Directory bread(block 64) failed [ 113.727499][ T4255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.727524][ T4255] usb 2-1: Product: syz [ 113.735785][ T6324] FAT-fs (loop2): Directory bread(block 65) failed [ 113.742318][ T4266] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 113.753130][ T6324] FAT-fs (loop2): Directory bread(block 66) failed [ 113.753170][ T6324] FAT-fs (loop2): Directory bread(block 67) failed [ 113.785505][ T6285] OCFS2: File system is now read-only. [ 113.794236][ T6324] FAT-fs (loop2): Directory bread(block 68) failed [ 113.804955][ T6324] FAT-fs (loop2): Directory bread(block 69) failed [ 113.820113][ T6327] loop0: detected capacity change from 0 to 256 [ 113.822778][ T6285] (syz.4.914,6285,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 113.826996][ T6324] FAT-fs (loop2): Directory bread(block 70) failed [ 113.834429][ T4266] usb 4-1: config 0 has no interface number 0 [ 113.845753][ T6324] FAT-fs (loop2): Directory bread(block 71) failed [ 113.867939][ T4255] usb 2-1: Manufacturer: syz [ 113.874497][ T6324] FAT-fs (loop2): Directory bread(block 72) failed [ 113.879596][ T4255] usb 2-1: SerialNumber: syz [ 113.886292][ T4266] usb 4-1: config 0 interface 41 has no altsetting 0 [ 113.899680][ T6324] FAT-fs (loop2): Directory bread(block 73) failed [ 113.910005][ T6285] (syz.4.914,6285,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 113.920224][ T6285] (syz.4.914,6285,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 113.930805][ T6285] (syz.4.914,6285,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 113.956995][ T6285] (syz.4.914,6285,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 114.003435][ T6285] (syz.4.914,6285,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 114.019406][ T6285] (syz.4.914,6285,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 114.027303][ T6285] (syz.4.914,6285,0):ocfs2_mknod:385 ERROR: status = -30 [ 114.040609][ T6285] (syz.4.914,6285,0):ocfs2_mknod:502 ERROR: status = -30 [ 114.065909][ T6285] (syz.4.914,6285,0):ocfs2_create:676 ERROR: status = -30 [ 114.068493][ T4266] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 114.086714][ T6331] netlink: 168 bytes leftover after parsing attributes in process `syz.0.936'. [ 114.118699][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.126732][ T4266] usb 4-1: Product: syz [ 114.137209][ T4266] usb 4-1: Manufacturer: syz [ 114.143281][ T4266] usb 4-1: SerialNumber: syz [ 114.167569][ T4197] (syz-executor,4197,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 114.186233][ T4266] usb 4-1: config 0 descriptor?? [ 114.191683][ T4197] ocfs2: Unmounting device (7,4) on (node local) [ 114.259217][ T4255] cdc_ether 2-1:3.146: More than one union descriptor, skipping ... [ 114.267269][ T4255] usb 2-1: bad CDC descriptors [ 114.304244][ T4255] usb 2-1: unsupported MDLM descriptors [ 114.345915][ T4255] usb 2-1: USB disconnect, device number 5 [ 114.478421][ T1335] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.698421][ T4266] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 114.708043][ T4266] CoreChips: probe of 4-1:0.41 failed with error -71 [ 114.751710][ T4266] usb 4-1: USB disconnect, device number 7 [ 114.858448][ T1335] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.878231][ T1335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 114.909027][ T1335] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.970899][ T1335] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 114.988678][ T1335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.018991][ T1335] usb 1-1: config 0 descriptor?? [ 115.251964][ T6385] loop3: detected capacity change from 0 to 512 [ 115.263563][ T1335] usb 1-1: USB disconnect, device number 5 [ 115.330054][ T6385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 115.378819][ T6385] System zones: 1-12 [ 115.411436][ T6385] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.963: invalid indirect mapped block 8 (level 2) [ 115.454956][ T6385] EXT4-fs (loop3): Remounting filesystem read-only [ 115.501622][ T6385] EXT4-fs (loop3): 1 truncate cleaned up [ 115.507308][ T6385] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,data_err=ignore,noinit_itable,sysvgroups,errors=remount-ro,. Quota mode: none. [ 115.898308][ T1335] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.921891][ T6380] loop4: detected capacity change from 0 to 40427 [ 115.928768][ T6409] loop0: detected capacity change from 0 to 1024 [ 116.018118][ T6380] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 116.047778][ T6380] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 116.070489][ T6380] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1ffff [ 116.089661][ T6409] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 116.111472][ T6380] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 116.138266][ T1335] usb 3-1: Using ep0 maxpacket: 16 [ 116.204440][ T6380] F2FS-fs (loop4): invalid crc value [ 116.246794][ T6425] loop1: detected capacity change from 0 to 2048 [ 116.270183][ T6380] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.347751][ T6425] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.395231][ T6380] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 116.407958][ T6380] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.423345][ T6432] loop3: detected capacity change from 0 to 2048 [ 116.430082][ T1335] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 116.458215][ T1335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.480899][ T1335] usb 3-1: Product: syz [ 116.485110][ T1335] usb 3-1: Manufacturer: syz [ 116.511795][ T1335] usb 3-1: SerialNumber: syz [ 116.521535][ T6380] attempt to access beyond end of device [ 116.521535][ T6380] loop4: rw=2049, want=45104, limit=40427 [ 116.549866][ T1335] usb 3-1: config 0 descriptor?? [ 116.551908][ T6432] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,errors=remount-ro,. Quota mode: none. [ 116.582424][ T6435] loop0: detected capacity change from 0 to 4096 [ 116.615544][ T6432] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.983: inline data xattr refers to an external xattr inode [ 116.636092][ T6432] EXT4-fs (loop3): Remounting filesystem read-only [ 116.688473][ T6435] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 116.828405][ T1335] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 116.835844][ T1335] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 116.945222][ T6442] loop1: detected capacity change from 0 to 2048 [ 117.037417][ T1335] usb 3-1: USB disconnect, device number 3 [ 117.110208][ T6447] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.177292][ T6442] NILFS (loop1): error -2 truncating bmap (ino=16) [ 117.324817][ T6447] ------------[ cut here ]------------ [ 117.330909][ T6447] WARNING: CPU: 0 PID: 6447 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 117.340378][ T6447] Modules linked in: [ 117.344307][ T6447] CPU: 0 PID: 6447 Comm: segctord Not tainted syzkaller #0 [ 117.351566][ T6447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.361687][ T6447] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 117.367700][ T6447] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a8 4c 03 00 e8 03 d7 6e fe e8 ee 86 f7 fd e9 b8 fc ff ff e8 f4 d6 6e fe <0f> 0b e9 16 fc ff ff e8 e8 d6 6e fe e8 d3 86 f7 fd e9 74 fe ff ff [ 117.387398][ T6447] RSP: 0018:ffffc90003d5f390 EFLAGS: 00010293 [ 117.393521][ T6447] RAX: ffffffff8308f39c RBX: ffff8880601711a0 RCX: ffff88801fd9bb80 [ 117.401574][ T6447] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 117.409605][ T6447] RBP: 0000000000000003 R08: dffffc0000000000 R09: ffffed100c3f50cc [ 117.417616][ T6447] R10: ffffed100c3f50cc R11: 1ffff1100c3f50cb R12: ffff88801fd9d308 [ 117.425687][ T6447] R13: ffff888055f349e0 R14: 00000000003f0002 R15: ffff888074b94430 [ 117.433727][ T6447] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 117.442753][ T6447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.449398][ T6447] CR2: 00007fff5830fff8 CR3: 000000006421d000 CR4: 00000000003506f0 [ 117.457417][ T6447] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.465466][ T6447] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.473507][ T6447] Call Trace: [ 117.476818][ T6447] [ 117.479843][ T6447] nilfs_dat_commit_update+0x24/0x40 [ 117.485163][ T6447] nilfs_btree_commit_update_v+0x93/0x400 [ 117.490980][ T6447] nilfs_btree_propagate+0x974/0xd40 [ 117.496312][ T6447] nilfs_bmap_propagate+0x70/0x120 [ 117.501525][ T6447] nilfs_segctor_apply_buffers+0x15d/0x320 [ 117.507365][ T6447] ? nilfs_collect_file_data+0xc0/0xc0 [ 117.512925][ T6447] nilfs_segctor_scan_file+0x75f/0x960 [ 117.518457][ T6447] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 117.525624][ T6447] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 117.531607][ T6447] ? rcu_is_watching+0x11/0xa0 [ 117.536409][ T6447] nilfs_segctor_do_construct+0x1c09/0x6be0 [ 117.542391][ T6447] ? add_chain_block+0x940/0x940 [ 117.547418][ T6447] ? nilfs_transaction_unlock+0x220/0x220 [ 117.553253][ T6447] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 117.559508][ T6447] ? clear_nonspinnable+0x60/0x60 [ 117.564565][ T6447] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 117.568300][ T4266] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.570097][ T6447] ? __lock_acquire+0x7c60/0x7c60 [ 117.582586][ T6447] ? __rwlock_init+0x140/0x140 [ 117.587516][ T6447] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 117.593747][ T6447] ? do_raw_spin_unlock+0x11d/0x230 [ 117.599011][ T6447] ? _raw_spin_unlock+0x24/0x40 [ 117.603882][ T6447] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 117.609415][ T6447] nilfs_segctor_construct+0x17b/0x690 [ 117.614910][ T6447] nilfs_segctor_thread+0x50a/0x1120 [ 117.620293][ T6447] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 117.626221][ T6447] ? nilfs_iput_work_func+0x70/0x70 [ 117.631497][ T6447] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 117.637499][ T6447] ? _raw_spin_unlock+0x40/0x40 [ 117.642426][ T6447] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 117.648388][ T6447] ? init_wait_entry+0xd0/0xd0 [ 117.653194][ T6447] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 117.659156][ T6447] ? __kthread_parkme+0x157/0x1b0 [ 117.664224][ T6447] kthread+0x436/0x520 [ 117.668365][ T6447] ? nilfs_iput_work_func+0x70/0x70 [ 117.673606][ T6447] ? kthread_blkcg+0xd0/0xd0 [ 117.678270][ T6447] ret_from_fork+0x1f/0x30 [ 117.682724][ T6447] [ 117.685778][ T6447] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.690019][ T6444] loop3: detected capacity change from 0 to 32768 [ 117.693069][ T6447] CPU: 0 PID: 6447 Comm: segctord Not tainted syzkaller #0 [ 117.706707][ T6447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.712449][ T6444] XFS: noikeep mount option is deprecated. [ 117.716780][ T6447] Call Trace: [ 117.716790][ T6447] [ 117.728838][ T6447] dump_stack_lvl+0x168/0x230 [ 117.733553][ T6447] ? show_regs_print_info+0x20/0x20 [ 117.738783][ T6447] ? load_image+0x3b0/0x3b0 [ 117.743329][ T6447] panic+0x2c9/0x7f0 [ 117.747266][ T6447] ? bpf_jit_dump+0xd0/0xd0 [ 117.751807][ T6447] ? ret_from_fork+0x1f/0x30 [ 117.756427][ T6447] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 117.761809][ T6447] __warn+0x248/0x2b0 [ 117.765808][ T6447] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 117.771291][ T6447] report_bug+0x1b7/0x2e0 [ 117.775635][ T6447] handle_bug+0x3a/0x70 [ 117.779794][ T6447] exc_invalid_op+0x16/0x40 [ 117.784300][ T6447] asm_exc_invalid_op+0x16/0x20 [ 117.789370][ T6447] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 117.795360][ T6447] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a8 4c 03 00 e8 03 d7 6e fe e8 ee 86 f7 fd e9 b8 fc ff ff e8 f4 d6 6e fe <0f> 0b e9 16 fc ff ff e8 e8 d6 6e fe e8 d3 86 f7 fd e9 74 fe ff ff [ 117.814974][ T6447] RSP: 0018:ffffc90003d5f390 EFLAGS: 00010293 [ 117.821055][ T6447] RAX: ffffffff8308f39c RBX: ffff8880601711a0 RCX: ffff88801fd9bb80 [ 117.829043][ T6447] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 117.837029][ T6447] RBP: 0000000000000003 R08: dffffc0000000000 R09: ffffed100c3f50cc [ 117.845005][ T6447] R10: ffffed100c3f50cc R11: 1ffff1100c3f50cb R12: ffff88801fd9d308 [ 117.853000][ T6447] R13: ffff888055f349e0 R14: 00000000003f0002 R15: ffff888074b94430 [ 117.860989][ T6447] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 117.866391][ T6447] nilfs_dat_commit_update+0x24/0x40 [ 117.871690][ T6447] nilfs_btree_commit_update_v+0x93/0x400 [ 117.877426][ T6447] nilfs_btree_propagate+0x974/0xd40 [ 117.882759][ T6447] nilfs_bmap_propagate+0x70/0x120 [ 117.887980][ T6447] nilfs_segctor_apply_buffers+0x15d/0x320 [ 117.893795][ T6447] ? nilfs_collect_file_data+0xc0/0xc0 [ 117.899261][ T6447] nilfs_segctor_scan_file+0x75f/0x960 [ 117.904732][ T6447] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 117.911860][ T6447] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 117.917765][ T6447] ? rcu_is_watching+0x11/0xa0 [ 117.922530][ T6447] nilfs_segctor_do_construct+0x1c09/0x6be0 [ 117.928426][ T6447] ? add_chain_block+0x940/0x940 [ 117.933408][ T6447] ? nilfs_transaction_unlock+0x220/0x220 [ 117.939131][ T6447] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 117.945296][ T6447] ? clear_nonspinnable+0x60/0x60 [ 117.950322][ T6447] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 117.955784][ T6447] ? __lock_acquire+0x7c60/0x7c60 [ 117.960817][ T6447] ? __rwlock_init+0x140/0x140 [ 117.965577][ T6447] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 117.971732][ T6447] ? do_raw_spin_unlock+0x11d/0x230 [ 117.976937][ T6447] ? _raw_spin_unlock+0x24/0x40 [ 117.981792][ T6447] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 117.987273][ T6447] nilfs_segctor_construct+0x17b/0x690 [ 117.992764][ T6447] nilfs_segctor_thread+0x50a/0x1120 [ 117.998071][ T6447] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 118.003962][ T6447] ? nilfs_iput_work_func+0x70/0x70 [ 118.009170][ T6447] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 118.015073][ T6447] ? _raw_spin_unlock+0x40/0x40 [ 118.019950][ T6447] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 118.025844][ T6447] ? init_wait_entry+0xd0/0xd0 [ 118.030617][ T6447] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 118.036518][ T6447] ? __kthread_parkme+0x157/0x1b0 [ 118.041556][ T6447] kthread+0x436/0x520 [ 118.045637][ T6447] ? nilfs_iput_work_func+0x70/0x70 [ 118.050858][ T6447] ? kthread_blkcg+0xd0/0xd0 [ 118.055457][ T6447] ret_from_fork+0x1f/0x30 [ 118.059893][ T6447] [ 118.063166][ T6447] Kernel Offset: disabled [ 118.067737][ T6447] Rebooting in 86400 seconds..