last executing test programs: 3.66380675s ago: executing program 3 (id=2425): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x183143) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000140)=""/229) 2.558345356s ago: executing program 3 (id=2437): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x2}) 2.234976553s ago: executing program 0 (id=2442): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_pauseparam={0x13, 0xe, 0x2, 0x2}}) 2.19058366s ago: executing program 3 (id=2443): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x49542, 0x11ac8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3193}]}, 0x48}, 0x1, 0x0, 0x0, 0x48030}, 0x4000) 2.155879914s ago: executing program 5 (id=2444): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 1.938842357s ago: executing program 2 (id=2446): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="280000002c000100000000000000006604000080140016"], 0x28}], 0x1}, 0x0) 1.937741342s ago: executing program 4 (id=2447): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x3008800, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES64, @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x1ec, &(0x7f0000000780)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 1.911273084s ago: executing program 0 (id=2448): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x541b, 0x1000000000000) 1.822883706s ago: executing program 3 (id=2449): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000740)=ANY=[@ANYBLOB='codepage=cp949,iocharset=cp865,umask=00000000000000000000003,file_umask=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB="0072d733420009a4c0eedbf1daa255f067cbd5c24fe4b55db981e7c208d7222fe872a496cdf2f8689ae37cb86a37bab80b9894f59f1b7f69155c3d99000000c79837e3ea4a786a3977517b6598f735926fc6c27950e2298dc82fc0ce22706366ea6006fbc309eb22dee13973c3a941b81f1fec017d27e9a4bca0f95bc4bf413f611e2a7aa11bbdd7446c38748c869aa0ec3b8436cb0106f420defe1e2e6ad94a47489364b43a8ba73345a545f9a376f142eb026b49cf9ffc05736f23771915810e4e967ae9c61b85f4bfbba1b7edbcb3"], 0x7, 0x2db, &(0x7f0000000240)="$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") lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) 1.7709181s ago: executing program 5 (id=2450): r0 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r0, 0x0, 0x0) 1.770803659s ago: executing program 1 (id=2451): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="540100001000130700000000000000000000000000000000ac1416aa0000000000000000000000004e2300004e2300000a0000005e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d032000000ac1414bb000000000000000000000000010000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000080000000000000000000000000000100000000000000000000000000000000000feffffff0000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004"], 0x154}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 1.542452251s ago: executing program 4 (id=2452): r0 = openat$sequencer(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f00000000c0)) 1.52583265s ago: executing program 2 (id=2453): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)='\t', 0x1}], 0x1, 0x0, 0x0, 0x9) 1.494173596s ago: executing program 0 (id=2454): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) 1.45728564s ago: executing program 5 (id=2455): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c00108004000b0004000680080002"], 0x30}, 0x1, 0x0, 0x0, 0x4004015}, 0x0) 1.370817s ago: executing program 1 (id=2456): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000340), 0x2000000, &(0x7f0000000440)={[{@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) 1.338242768s ago: executing program 3 (id=2457): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x0, 0x6}, {0x7, 0x1, 0xb, 0x1, 0xa, 0xffff}, {}, {}, {0x5, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.179385653s ago: executing program 2 (id=2458): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x1, 0x0, "57dabb7def475097aa828c3f9cbee8bc90462c0ba4e1762577a16c9db6db9435"}) 1.1640375s ago: executing program 0 (id=2459): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000300)={0x6, 0x9f}) 1.137794113s ago: executing program 4 (id=2460): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 1.054915801s ago: executing program 5 (id=2461): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000)=0x100000001, 0x4) 1.030284776s ago: executing program 1 (id=2462): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000040)=0x1) 866.658074ms ago: executing program 2 (id=2463): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000000240)={[{'noacl'}]}) 859.412608ms ago: executing program 3 (id=2464): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=cp737,umask=0\x00\x00\x00\x00\x00\x00\x00@0800d=', @ANYRESHEX=0x0, @ANYBLOB=',integrity,errors=continue,discard,noquota\x00iocharset=cp850,grpquota,usrquota,uid=', @ANYRESHEX=0x0, @ANYBLOB=',quota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',noquota,usrquota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,subj_type=+-]{.&Q.,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',measure,\x00'], 0x5, 0x610f, &(0x7f0000002a00)="$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") chdir(&(0x7f0000000240)='./file0\x00') 811.66152ms ago: executing program 5 (id=2465): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f00000001c0)) 811.331807ms ago: executing program 0 (id=2466): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75e, &(0x7f0000001100)="$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") mount(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='ocfs2_dlmfs\x00', 0x1008440, 0x0) 767.723871ms ago: executing program 4 (id=2467): r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x90, 0x0, 0xffffffffffffffff, 0x0) 646.886797ms ago: executing program 1 (id=2468): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, r0, 0x7, 0xfff, 0x800000000, 0x5}) 469.161149ms ago: executing program 5 (id=2469): r0 = syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000680)={[{@fat=@codepage={'codepage', 0x3d, '850'}}, {@fat=@nfs}, {@fat=@tz_utc}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@nfs}, {@fat=@sys_immutable}, {@fat=@nocase}, {@nodots}, {@fat=@discard}, {@nodots}, {@nodots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@nodots}, {@nodots}, {@dots}]}, 0x0, 0x1f4, &(0x7f0000000b00)="$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") getdents64(r0, &(0x7f00000002c0)=""/189, 0xbd) 453.633195ms ago: executing program 4 (id=2470): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x7, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 394.890411ms ago: executing program 2 (id=2471): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x8, 0x1) 381.244375ms ago: executing program 1 (id=2472): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000340)=ANY=[@ANYBLOB='codepage=cp932,part=0x000000000000007d,umask=00000000000000000000006,iocharset=koi8-r,dir_umask=00000000000000000037352,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00ac99a6354d09c54f03fa75d0d6403839dd83e71e4644d2e8e761a0c4d284d09f9173bce12f61315417c8dbf99013a9ef69fa23478a31a472c2fd774e43eef9464764cd71c12c034c33b3de1d93e10c5cd5b52cc7181c7a1220972298443752ed63c1dcc760cc702d7cf36d0d00df724b07622fb9aa41881ef402f92b2c83eca870a672461b5fb7794c85e435f9ff1693eb4435a835afac7eb63c981bd66d9c7344f12acb5966fa823424d939d8a92600779204e1d288ce28dd9be316f6ba3d38e7d97222c0375b1f3b5dc5a3bae97388ac12fc16df74cd686e8fce"], 0x1, 0x2e3, &(0x7f0000001980)="$eJzs3c1u00oYxvFnnKRNP9Tj0/boSGxAhUqwqSiwQGyCULbsWSGgSaWKqIi2SMCmBbFEXAB7boGLYAPiBmDFigvozmjGE8dOHadFTdyP/09q5ExmPK81nsy8liACcG7da/74dPOX/TNSRRVJd6RAUl2qSvpP/9dfbO5s7HTaraITVVwL+2cUtzQH6qxttvOa2nauhRfad1XNpsswGlEU3f1ZdhAonZv9OQJp0s9D93l9zHGNyp50sewYxi09wGZf+3qpuRLDAQCcAH79D/wyMeuKjIJAWvbL/pla//fLDuB43eocKIoKG6TWf7e7i4wd33/cR718z6Vw9vOgmyUeJpha3/sJxXdWZoNphmWVLpZgan2jqpW1N2oFequGl6q26F5b8a3bNSTapZzctMDgs9V0fzq+Grej7OdD2l3vdpcT/0Jhj5NHifNwzBfzzTw0oT6qlez/qpGxw+RGKuwbqaC2vtFpXx98xhnXytaST/sbjUaQqfKv6+SC78EbMkr1/Iwkfc7uA4K9JIKiOF3f88o+VoivbnVIq4W8VmHybkCrxUwrezW2r5W1Z53CRymj0b1E88E8MEv6rc9qpvb/gY1vWamZWfRVb1xNf2fE1zORX7PqaoYHVo7edLmUROCN4KY/D472tOy9nui25rZfvX5a6XTaW/bgcebAyB48n90yvqT2TuqrM66DigrqaK9XElm7UXTYM0ejDP7asZ7Qfn8kJXb65FW2sywpCcY9TOfloPlVRTdk0UFkSptEvQPTvZGiSBpQZ2TfUzhBto0d69TSMVVmNCiB3XeZOP9zO3m/q3M5i30JC/bpxUmmMmdcTTK47FZw3r1OHymDmxmcwaV6vDEgZ3Q51+Wr0pVUoVFhj6GP84wwTX3XI57/AwAAAAAAAAAAAAAAAAAAnDbj+CcHZV8jAAAAAAAAAAAAAAAAAAAAAACn3V/9/m/e/xHvfv835Pd/gVPkTwAAAP//fMpzyA==") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x248d3, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 180.218667ms ago: executing program 0 (id=2473): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x40045431, &(0x7f00000001c0)) 139.231321ms ago: executing program 4 (id=2474): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204c08, &(0x7f00000000c0)={[{@space_cache_v2}, {@clear_cache}, {@nodatasum}, {@compress}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0xa}) 129.439093ms ago: executing program 2 (id=2475): syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000540)=ANY=[@ANYBLOB='utf8,iocharset=iso8859-2,check=relaxed,iocharset=iso8859-5,overriderockperm,map=acorn,check=strict,norock,nocompress,mode=0x000000000000005a,unhide,uid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0xa35, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0, 0x0) 0s ago: executing program 1 (id=2476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): F-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.584500][ T7851] loop1: detected capacity change from 0 to 1024 [ 170.876712][ T5884] Bluetooth: Can't get version to change to load ram patch err [ 170.915914][ T5884] Bluetooth: Loading patch file failed [ 170.943126][ T5884] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 170.998346][ T5884] usb 3-1: USB disconnect, device number 3 [ 171.094927][ T7859] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 171.167209][ T7865] netlink: 'syz.5.780': attribute type 3 has an invalid length. [ 171.200721][ T7859] CIFS mount error: No usable UNC path provided in device string! [ 171.200721][ T7859] [ 171.270907][ T7859] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 171.369860][ T7869] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.517301][ T7864] loop3: detected capacity change from 0 to 8192 [ 171.587823][ T7864] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.746461][ T7879] netlink: 72 bytes leftover after parsing attributes in process `syz.2.787'. [ 172.998920][ T7875] loop0: detected capacity change from 0 to 32768 [ 173.039519][ T7875] [ 173.039519][ T7875] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.039519][ T7875] [ 173.081644][ T7914] tmpfs: Unknown parameter 'N' [ 173.129569][ T7875] ERROR: (device loop0): diWrite: ixpxd invalid [ 173.129569][ T7875] [ 173.160083][ T7875] ERROR: (device loop0): txAbort: [ 173.160083][ T7875] [ 173.357268][ T5843] [ 173.357268][ T5843] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.357268][ T5843] [ 173.428126][ T5843] [ 173.428126][ T5843] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.428126][ T5843] [ 173.681485][ T7928] loop2: detected capacity change from 0 to 2048 [ 173.730721][ T7928] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 173.817363][ T7933] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.872425][ T7928] NILFS (loop2): failed to count free inodes: err=-34 [ 173.904868][ T7936] netlink: 'syz.1.817': attribute type 28 has an invalid length. [ 174.199649][ T7943] xt_socket: unknown flags 0x8 [ 174.277389][ T5834] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 147 [ 174.304697][ T5834] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 174.328614][ T5834] Remounting filesystem read-only [ 174.352596][ T5834] NILFS (loop2): error -5 truncating bmap (ino=15) [ 174.477130][ T5834] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 175.227186][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.834'. [ 175.246885][ T7975] loop1: detected capacity change from 0 to 128 [ 175.304608][ T7975] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 175.352258][ T7975] sysv_free_block: flc_count > flc_size [ 175.389221][ T7975] sysv_free_block: flc_count > flc_size [ 175.389265][ T7975] sysv_free_block: flc_count > flc_size [ 175.389281][ T7975] sysv_free_block: flc_count > flc_size [ 175.389297][ T7975] sysv_free_block: flc_count > flc_size [ 175.389313][ T7975] sysv_free_block: flc_count > flc_size [ 175.389328][ T7975] sysv_free_block: flc_count > flc_size [ 175.389344][ T7975] sysv_free_block: flc_count > flc_size [ 175.389360][ T7975] sysv_free_block: flc_count > flc_size [ 175.389409][ T7975] sysv_free_block: flc_count > flc_size [ 175.413443][ T7975] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 175.619177][ T7984] loop2: detected capacity change from 0 to 1024 [ 175.672896][ T7984] fuse: Bad value for 'fd' [ 175.715492][ T51] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 175.765434][ T1091] hfsplus: b-tree write err: -5, ino 4 [ 175.878440][ T51] usb 2-1: config 0 has an invalid interface number: 149 but max is 0 [ 175.908997][ T51] usb 2-1: config 0 has no interface number 0 [ 175.950739][ T51] usb 2-1: too many endpoints for config 0 interface 149 altsetting 3: 92, using maximum allowed: 30 [ 176.020802][ T51] usb 2-1: config 0 interface 149 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 92 [ 176.066369][ T51] usb 2-1: config 0 interface 149 has no altsetting 0 [ 176.090038][ T51] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 176.111711][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.137802][ T51] usb 2-1: Product: syz [ 176.164229][ T51] usb 2-1: Manufacturer: syz [ 176.210646][ T51] usb 2-1: SerialNumber: syz [ 176.225558][ T51] usb 2-1: config 0 descriptor?? [ 176.521938][ T51] usb 2-1: USB disconnect, device number 4 [ 176.549936][ T8007] ip6tnl1: entered allmulticast mode [ 176.741009][ T5884] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 176.948617][ T8022] netlink: 48 bytes leftover after parsing attributes in process `syz.2.850'. [ 176.971257][ T7979] loop5: detected capacity change from 0 to 32768 [ 176.980403][ T8022] netlink: 48 bytes leftover after parsing attributes in process `syz.2.850'. [ 177.010814][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.053229][ T5884] usb 1-1: config 0 has no interfaces? [ 177.094763][ T5884] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 177.130850][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.202879][ T5884] usb 1-1: config 0 descriptor?? [ 177.225615][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.852'. [ 177.270863][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 177.420356][ T5902] usb 1-1: USB disconnect, device number 6 [ 177.800957][ T8045] mmap: syz.1.860 (8045): VmData 37482496 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 178.332499][ T8057] loop1: detected capacity change from 0 to 2048 [ 178.361218][ T8057] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 178.416869][ T8065] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.440978][ T8064] overlay: Bad value for 'workdir' [ 178.579768][ T8070] loop2: detected capacity change from 0 to 128 [ 178.619041][ T8070] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 178.667842][ T8073] tmpfs: Bad value for 'mpol' [ 178.681444][ T8070] sysv_free_block: flc_count > flc_size [ 178.687069][ T8070] sysv_free_block: flc_count > flc_size [ 178.748382][ T8070] sysv_free_block: flc_count > flc_size [ 178.770781][ T8070] sysv_free_block: flc_count > flc_size [ 178.776362][ T8070] sysv_free_block: flc_count > flc_size [ 178.858662][ T8070] sysv_free_block: flc_count > flc_size [ 178.868987][ T8078] loop4: detected capacity change from 0 to 256 [ 178.907760][ T8070] sysv_free_block: flc_count > flc_size [ 178.940999][ T8070] sysv_free_block: flc_count > flc_size [ 178.946687][ T8070] sysv_free_block: flc_count > flc_size [ 179.007201][ T8070] sysv_free_block: flc_count > flc_size [ 179.030747][ T8070] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 179.065667][ T8080] openvswitch: netlink: Actions may not be safe on all matching packets [ 179.374449][ T5903] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 179.520779][ T8091] netlink: 156 bytes leftover after parsing attributes in process `syz.1.875'. [ 179.544184][ T8049] loop3: detected capacity change from 0 to 32768 [ 179.574535][ T5903] usb 3-1: config 0 has an invalid interface number: 149 but max is 0 [ 179.589768][ T8049] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.862 (8049) [ 179.610805][ T5903] usb 3-1: config 0 has no interface number 0 [ 179.616965][ T5903] usb 3-1: too many endpoints for config 0 interface 149 altsetting 3: 92, using maximum allowed: 30 [ 179.673262][ T8049] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.712037][ T5903] usb 3-1: config 0 interface 149 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 92 [ 179.719159][ T8049] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 179.778151][ T8049] BTRFS info (device loop3): disk space caching is enabled [ 179.779310][ T5903] usb 3-1: config 0 interface 149 has no altsetting 0 [ 179.820797][ T8049] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 179.840340][ T5903] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 179.860664][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.868847][ T5903] usb 3-1: Product: syz [ 179.901427][ T5903] usb 3-1: Manufacturer: syz [ 179.912421][ T5903] usb 3-1: SerialNumber: syz [ 179.933502][ T5903] usb 3-1: config 0 descriptor?? [ 180.073427][ T8049] BTRFS info (device loop3): rebuilding free space tree [ 180.201775][ T5903] usb 3-1: USB disconnect, device number 4 [ 180.213901][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.5.880'. [ 180.224436][ T8049] BTRFS info (device loop3): disabling free space tree [ 180.262441][ T8049] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 180.310647][ T8049] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 180.653248][ T8083] loop0: detected capacity change from 0 to 32768 [ 180.693161][ T8083] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.872 (8083) [ 180.797047][ T8083] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 180.846837][ T5842] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 180.880899][ T8083] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 180.889460][ T8083] BTRFS info (device loop0): using free-space-tree [ 181.561301][ T5843] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.814653][ T8174] capability: warning: `syz.5.896' uses deprecated v2 capabilities in a way that may be insecure [ 181.828343][ T8173] loop3: detected capacity change from 0 to 512 [ 181.892504][ T8173] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.062153][ T8173] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 182.107305][ T8179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.898'. [ 182.140873][ T8173] EXT4-fs error (device loop3): ext4_clear_blocks:874: inode #13: comm syz.3.886: attempt to clear invalid blocks 2 len 1 [ 182.221250][ T8173] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 182.278613][ T8186] tmpfs: Bad value for 'mpol' [ 182.312043][ T8173] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.886: invalid indirect mapped block 1819239214 (level 0) [ 182.420690][ T8173] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.886: invalid indirect mapped block 1819239214 (level 1) [ 182.499314][ T8173] EXT4-fs (loop3): 1 truncate cleaned up [ 182.519840][ T8173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.822898][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.904195][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.909'. [ 183.399298][ T29] audit: type=1326 audit(1740101768.101:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9a78d0a9 code=0x7ffc0000 [ 183.488335][ T29] audit: type=1326 audit(1740101768.101:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f9d9a78d0a9 code=0x7ffc0000 [ 183.586397][ T29] audit: type=1326 audit(1740101768.101:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9a78d0a9 code=0x7ffc0000 [ 183.639299][ T29] audit: type=1326 audit(1740101768.101:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9a78d0a9 code=0x7ffc0000 [ 183.728919][ T8220] loop1: detected capacity change from 0 to 512 [ 183.736117][ T8220] ext4: Unknown parameter 'noacl' [ 183.837074][ T8224] loop3: detected capacity change from 0 to 64 [ 184.335736][ T5884] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 184.381255][ T8196] loop4: detected capacity change from 0 to 32768 [ 184.434308][ T8196] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 184.434308][ T8196] [ 184.477547][ T8196] xtLookup: xtSearch returned -5 [ 184.490049][ T8196] add_index: get/read_metapage failed! [ 184.545055][ T5884] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 184.564688][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.595094][ T5884] usb 1-1: Product: syz [ 184.599336][ T5884] usb 1-1: Manufacturer: syz [ 184.630699][ T5884] usb 1-1: SerialNumber: syz [ 184.649943][ T5884] usb 1-1: config 0 descriptor?? [ 184.723801][ T5884] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 184.744028][ T5884] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 184.779425][ T5884] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 184.857306][ T8244] loop5: detected capacity change from 0 to 2048 [ 184.921621][ T5902] usb 1-1: USB disconnect, device number 7 [ 184.946362][ T8244] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.434362][ T8234] loop3: detected capacity change from 0 to 32768 [ 185.755437][ T8270] ERROR: device name not specified. [ 185.782789][ T8234] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 185.880923][ T8234] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 185.911073][ T8234] bcachefs (loop3): Version upgrade required: [ 185.911073][ T8234] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 185.911073][ T8234] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 185.911073][ T8234] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 186.061112][ T8234] bcachefs (loop3): dropping and reconstructing all alloc info [ 186.123585][ T8234] bcachefs (loop3): accounting_read... done [ 186.151190][ T8234] bcachefs (loop3): alloc_read... done [ 186.156776][ T8234] bcachefs (loop3): stripes_read... done [ 186.212287][ T8234] bcachefs (loop3): snapshots_read... done [ 186.219097][ T8234] bcachefs (loop3): done starting filesystem [ 186.608226][ T5842] bcachefs (loop3): shutting down [ 186.761956][ T5842] bcachefs (loop3): shutdown complete [ 187.408003][ T8313] loop0: detected capacity change from 0 to 512 [ 187.519187][ T8313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.528367][ T8322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.962'. [ 187.532563][ T8313] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.569400][ T8320] loop1: detected capacity change from 0 to 8 [ 187.650346][ T8320] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 187.705395][ T8284] loop4: detected capacity change from 0 to 32768 [ 187.714812][ T8320] process 'syz.1.961' launched './file2' with NULL argv: empty string added [ 187.735649][ T8313] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 187.736550][ T8320] cramfs: Error -3 while decompressing! [ 187.764256][ T8284] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.943 (8284) [ 187.801533][ T8320] cramfs: ffffffff9a98a6e8(26)->ffff888078aa5000(4096) [ 187.823123][ T8313] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 187.835133][ T8320] cramfs: Error -3 while decompressing! [ 187.859448][ T8313] EXT4-fs error (device loop0): ext4_acquire_dquot:6925: comm syz.0.959: Failed to acquire dquot type 1 [ 187.875469][ T8284] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.897890][ T8320] cramfs: ffffffff9a98a702(26)->ffff888078aa6000(4096) [ 187.907364][ T8284] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 187.911342][ T8320] cramfs: Error -3 while decompressing! [ 187.935887][ T8320] cramfs: ffffffff9a98a6e8(26)->ffff888078aa5000(4096) [ 187.962570][ T8284] BTRFS info (device loop4): using free-space-tree [ 188.104220][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.321482][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 188.631415][ T5854] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.996437][ T29] audit: type=1326 audit(1740101773.701:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca9f8d0a9 code=0x7ffc0000 [ 189.080997][ T29] audit: type=1326 audit(1740101773.701:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca9f8d0a9 code=0x7ffc0000 [ 189.161718][ T29] audit: type=1326 audit(1740101773.761:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0ca9f8d0a9 code=0x7ffc0000 [ 189.794239][ T8382] loop5: detected capacity change from 0 to 256 [ 190.130317][ T8366] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 190.198403][ T8395] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 190.392694][ T29] audit: type=1326 audit(1740101775.101:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3936f8d0a9 code=0x7ffc0000 [ 190.488793][ T29] audit: type=1326 audit(1740101775.101:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3936f8d0a9 code=0x7ffc0000 [ 190.570871][ T29] audit: type=1326 audit(1740101775.121:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f3936f8d0a9 code=0x7ffc0000 [ 190.650678][ T29] audit: type=1326 audit(1740101775.121:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3936f8d0a9 code=0x7ffc0000 [ 190.740660][ T29] audit: type=1326 audit(1740101775.121:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.0.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3936f8d0a9 code=0x7ffc0000 [ 190.916086][ T8415] loop3: detected capacity change from 0 to 256 [ 190.992774][ T8417] QAT: Stopping all acceleration devices. [ 191.869377][ T8449] netlink: 'syz.3.1003': attribute type 21 has an invalid length. [ 191.880757][ T5899] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 191.901611][ T8449] netlink: 'syz.3.1003': attribute type 1 has an invalid length. [ 191.923518][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 191.930788][ T8449] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1003'. [ 192.051073][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 192.058157][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 192.081882][ T5899] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 192.101050][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.109209][ T5899] usb 6-1: Product: syz [ 192.119333][ T5899] usb 6-1: Manufacturer: syz [ 192.161789][ T5899] usb 6-1: SerialNumber: syz [ 192.203976][ T5899] usb 6-1: config 0 descriptor?? [ 192.222205][ T5899] hub 6-1:0.0: bad descriptor, ignoring hub [ 192.264629][ T5899] hub 6-1:0.0: probe with driver hub failed with error -5 [ 192.331218][ T5899] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input9 [ 192.380899][ T5902] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 192.415809][ T8462] loop4: detected capacity change from 0 to 256 [ 192.584234][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 192.613738][ T8467] netlink: 'syz.1.1014': attribute type 1 has an invalid length. [ 192.619901][ T5902] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 192.637410][ T8467] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1014'. [ 192.649689][ T5902] usb 1-1: config 0 has no interface number 0 [ 192.670469][ T5902] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 192.716752][ T5902] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 192.786186][ T5902] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 192.868316][ T5884] usb 6-1: USB disconnect, device number 2 [ 192.874413][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.908976][ T5902] usb 1-1: Product: syz [ 192.925825][ T5902] usb 1-1: Manufacturer: syz [ 192.955835][ T5902] usb 1-1: SerialNumber: syz [ 192.981475][ T5902] usb 1-1: config 0 descriptor?? [ 193.222981][ T5902] radio-si470x 1-1:0.35: this is not a si470x device. [ 193.423886][ T5902] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 193.460504][ T5902] usb 1-1: USB disconnect, device number 8 [ 193.493196][ T8489] netlink: 'syz.2.1036': attribute type 3 has an invalid length. [ 193.521668][ T8489] netlink: 'syz.2.1036': attribute type 1 has an invalid length. [ 193.541615][ T8489] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1036'. [ 193.731099][ T5884] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 193.934123][ T5884] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 193.950763][ T5884] usb 4-1: config 0 has no interface number 0 [ 193.980737][ T5884] usb 4-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=c4.f4 [ 194.010255][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.030501][ T5884] usb 4-1: Product: syz [ 194.048968][ T5884] usb 4-1: Manufacturer: syz [ 194.089454][ T5884] usb 4-1: SerialNumber: syz [ 194.128457][ T5884] usb 4-1: config 0 descriptor?? [ 194.229008][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 194.399518][ T5903] usb 4-1: USB disconnect, device number 4 [ 194.698752][ T8521] loop1: detected capacity change from 0 to 128 [ 195.202871][ T8536] netlink: 'syz.0.1048': attribute type 13 has an invalid length. [ 195.502948][ T8544] loop3: detected capacity change from 0 to 64 [ 195.557018][ T8544] hfs: unable to locate alternate MDB [ 195.583662][ T8544] hfs: continuing without an alternate MDB [ 196.081350][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1060'. [ 196.289559][ T8525] loop4: detected capacity change from 0 to 32768 [ 196.402864][ T8570] ipt_REJECT: TCP_RESET invalid for non-tcp [ 196.574398][ T8525] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 196.660906][ T8525] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 196.669222][ T8525] bcachefs (loop4): Version upgrade required: [ 196.669222][ T8525] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 196.669222][ T8525] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 196.669222][ T8525] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 196.780209][ T8525] bcachefs (loop4): dropping and reconstructing all alloc info [ 196.883317][ T8525] bcachefs (loop4): accounting_read... [ 196.914368][ T8525] done [ 196.917223][ T8525] bcachefs (loop4): alloc_read... done [ 196.924952][ T8525] bcachefs (loop4): stripes_read... done [ 196.950960][ T8525] bcachefs (loop4): snapshots_read... done [ 196.981243][ T8525] bcachefs (loop4): done starting filesystem [ 197.322846][ T5854] bcachefs (loop4): shutting down [ 197.449466][ T8610] loop3: detected capacity change from 0 to 256 [ 197.463606][ T5854] bcachefs (loop4): shutdown complete [ 197.503302][ T8610] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 197.523082][ T8610] FAT-fs (loop3): Filesystem has been set read-only [ 197.544220][ T8610] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 197.561139][ T5899] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 197.576498][ T8610] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 197.616174][ T8610] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 197.643577][ T8610] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 197.677961][ T8610] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 197.697659][ T5902] IPVS: starting estimator thread 0... [ 197.714411][ T8610] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 197.730753][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 197.743994][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 197.747585][ T8610] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 197.765932][ T5899] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 197.785458][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.803864][ T8610] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 197.810646][ T5899] usb 1-1: Product: syz [ 197.820757][ T8618] IPVS: using max 16 ests per chain, 38400 per kthread [ 197.837388][ T5899] usb 1-1: Manufacturer: syz [ 197.837678][ T8610] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 197.851165][ T5899] usb 1-1: SerialNumber: syz [ 197.858293][ T5899] usb 1-1: config 0 descriptor?? [ 197.885282][ T29] audit: type=1800 audit(1740101782.591:30): pid=8610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1079" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 197.942112][ T5899] hub 1-1:0.0: bad descriptor, ignoring hub [ 197.948099][ T5899] hub 1-1:0.0: probe with driver hub failed with error -5 [ 198.000428][ T5899] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 198.492513][ T8637] autofs4:pid:8637:validate_dev_ioctl: path string terminator missing for cmd(0xc018937d) [ 198.684755][ T8643] loop5: detected capacity change from 0 to 1024 [ 198.771238][ T8647] loop1: detected capacity change from 0 to 8 [ 198.815301][ T8647] SQUASHFS error: zlib decompression failed, data probably corrupt [ 198.829714][ T8647] SQUASHFS error: Failed to read block 0x13e: -5 [ 198.850719][ T5899] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 198.864004][ T8647] SQUASHFS error: Unable to read metadata cache entry [13c] [ 198.879909][ T8647] SQUASHFS error: Unable to read directory block [13c:26] [ 198.973748][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.980325][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.011344][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 199.021061][ T5899] usb 3-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 199.030160][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.083157][ T5899] usb 3-1: Product: syz [ 199.087584][ T5899] usb 3-1: Manufacturer: syz [ 199.114368][ T5899] usb 3-1: SerialNumber: syz [ 199.188999][ T5899] usb 3-1: config 0 descriptor?? [ 199.439453][ T5899] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 199.622889][ T5903] usb 3-1: USB disconnect, device number 5 [ 199.679053][ T8666] loop1: detected capacity change from 0 to 64 [ 200.782211][ T29] audit: type=1326 audit(1740101785.491:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 200.916755][ T29] audit: type=1326 audit(1740101785.491:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 200.981413][ T29] audit: type=1326 audit(1740101785.491:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 201.069393][ T29] audit: type=1326 audit(1740101785.491:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 201.171387][ T8709] netlink: 'syz.3.1125': attribute type 22 has an invalid length. [ 201.656039][ T5902] usb 1-1: USB disconnect, device number 9 [ 202.025548][ T8689] loop1: detected capacity change from 0 to 32768 [ 202.111127][ T8689] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1114 (8689) [ 202.257881][ T8689] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.310842][ T8689] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 202.370663][ T8689] BTRFS info (device loop1): disk space caching is enabled [ 202.403773][ T8689] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 202.487853][ T8742] loop2: detected capacity change from 0 to 1024 [ 202.650040][ T8689] BTRFS info (device loop1): rebuilding free space tree [ 202.780944][ T8689] BTRFS info (device loop1): disabling free space tree [ 202.788003][ T8689] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 202.851227][ T8689] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 203.051190][ T8771] capability: warning: `syz.2.1148' uses 32-bit capabilities (legacy support in use) [ 203.281260][ T8774] loop5: detected capacity change from 0 to 1764 [ 203.301001][ T5836] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.469892][ T8779] geneve2: entered promiscuous mode [ 203.503845][ T8779] geneve2: entered allmulticast mode [ 203.535247][ T8781] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1153'. [ 204.043878][ T8739] loop0: detected capacity change from 0 to 32768 [ 204.112841][ T8739] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1139 (8739) [ 204.200296][ T8795] loop1: detected capacity change from 0 to 256 [ 204.256676][ T8739] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 204.313848][ T8799] loop5: detected capacity change from 0 to 64 [ 204.320836][ T8739] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 204.329336][ T8739] BTRFS info (device loop0): disk space caching is enabled [ 204.411654][ T8739] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 204.460230][ T8795] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 204.461052][ T8803] kAFS: unable to lookup cell '.yz1' [ 204.749429][ T8739] BTRFS info (device loop0): rebuilding free space tree [ 204.856554][ T8739] BTRFS info (device loop0): disabling free space tree [ 204.888412][ T8825] CIFS: VFS: Malformed UNC in devname [ 204.915175][ T8739] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 204.970801][ T8739] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 205.186145][ T8739] BTRFS error: failed to open device for path Ü with flags 0x1: -2 [ 205.421657][ T5843] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.453542][ T8835] loop2: detected capacity change from 0 to 2048 [ 205.480343][ T8835] iocharset maccenteur37ØŸ»)¬â~\ª¹éði®Ô}­”îvU§~ÝÑ#ê@IË«š9€Ìx‚ÅÔHÓ¦ŸI"¡“½Áæ3:Ö not found [ 205.821026][ T5902] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 206.039192][ T5902] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.060728][ T8851] netlink: 'syz.5.1180': attribute type 21 has an invalid length. [ 206.068751][ T8851] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1180'. [ 206.090783][ T5902] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 63798, setting to 1024 [ 206.130168][ T5902] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 206.173494][ T5902] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.221076][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.259217][ T8835] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.275638][ T5902] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.307806][ T5902] usb 3-1: invalid MIDI out EP 0 [ 206.571913][ T8867] loop3: detected capacity change from 0 to 512 [ 206.590187][ T5902] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 206.608804][ T8867] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 206.678710][ T8867] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 206.680683][ T5902] usb 3-1: USB disconnect, device number 6 [ 206.804717][ T8867] EXT4-fs (loop3): orphan cleanup on readonly fs [ 206.864426][ T8867] EXT4-fs error (device loop3): mb_free_blocks:1945: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 206.909232][ T8867] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #11: comm syz.3.1186: corrupted inode contents [ 206.926603][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.960542][ T8867] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #11: comm syz.3.1186: mark_inode_dirty error [ 207.000276][ T8867] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.1186: invalid indirect mapped block 1 (level 1) [ 207.049279][ T8867] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #11: comm syz.3.1186: corrupted inode contents [ 207.109311][ T8867] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 207.157279][ T8867] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #11: comm syz.3.1186: corrupted inode contents [ 207.226549][ T8867] EXT4-fs error (device loop3): ext4_truncate:4240: inode #11: comm syz.3.1186: mark_inode_dirty error [ 207.291023][ T8867] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 207.341012][ T8867] EXT4-fs (loop3): 1 truncate cleaned up [ 207.349414][ T8867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 207.350150][ T8885] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 207.423236][ T8885] bond0: (slave lo): Error: Device can not be enslaved while up [ 207.723426][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.750398][ T8896] loop0: detected capacity change from 0 to 256 [ 207.835396][ T8900] netlink: 'syz.1.1200': attribute type 10 has an invalid length. [ 207.953427][ T8900] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.049599][ T8900] bond0: (slave team0): Enslaving as an active interface with an up link [ 208.410739][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'. [ 208.932030][ T8924] netlink: 'syz.5.1214': attribute type 21 has an invalid length. [ 209.162010][ T8893] loop4: detected capacity change from 0 to 32768 [ 209.240218][ T8893] [ 209.240218][ T8893] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.240218][ T8893] [ 209.341926][ T8893] ERROR: (device loop4): diWrite: ixpxd invalid [ 209.341926][ T8893] [ 209.438787][ T8893] ERROR: (device loop4): txAbort: [ 209.438787][ T8893] [ 209.663601][ T5854] [ 209.663601][ T5854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.663601][ T5854] [ 209.703449][ T5854] [ 209.703449][ T5854] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 209.703449][ T5854] [ 210.273182][ T8919] loop0: detected capacity change from 0 to 32768 [ 210.368561][ T8919] find_entry called with index >= next_index [ 210.383865][ T8919] find_entry called with index >= next_index [ 210.433936][ T8919] find_entry called with index >= next_index [ 210.528620][ T8920] loop1: detected capacity change from 0 to 40427 [ 210.571429][ T8920] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x7 [ 210.622522][ T8920] F2FS-fs (loop1): invalid crc value [ 210.642574][ T8920] F2FS-fs (loop1): Found nat_bits in checkpoint [ 210.909882][ T8920] F2FS-fs (loop1): Start checkpoint disabled! [ 210.980916][ T8920] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 211.161448][ T8964] syz.5.1235: attempt to access beyond end of device [ 211.161448][ T8964] loop5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 211.215895][ T8964] syz.5.1235: attempt to access beyond end of device [ 211.215895][ T8964] loop5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 211.302804][ T8964] Mount JFS Failure: -5 [ 211.307313][ T8964] jfs_mount failed w/return code = -5 [ 211.365177][ T8966] block device autoloading is deprecated and will be removed. [ 211.424941][ T52] kworker/u8:3: attempt to access beyond end of device [ 211.424941][ T52] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 211.497590][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 211.561177][ T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 211.783049][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1241'. [ 211.930207][ T8982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.278999][ T8987] loop4: detected capacity change from 0 to 128 [ 212.332565][ T8987] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 212.411604][ T8987] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 212.727699][ T11] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 212.889512][ T9004] tmpfs: Bad value for 'mpol' [ 213.140378][ T9012] loop1: detected capacity change from 0 to 1024 [ 213.182819][ T9012] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 213.212917][ T9012] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 213.260809][ T9012] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 213.293499][ T9012] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #5: comm syz.1.1258: unexpected bad inode w/o EXT4_IGET_BAD [ 213.370858][ T9012] EXT4-fs (loop1): no journal found [ 213.377324][ T9012] EXT4-fs (loop1): can't get journal size [ 213.395553][ T9012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.439188][ T9012] overlay: filesystem on ./file0 is read-only [ 213.478085][ T9024] loop3: detected capacity change from 0 to 1024 [ 213.579906][ T9020] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1260'. [ 213.684814][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.198768][ T9043] misc userio: No port type given on /dev/userio [ 214.764716][ T9055] loop5: detected capacity change from 0 to 2048 [ 214.801642][ T9055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.836536][ T9055] EXT4-fs: Ignoring removed nobh option [ 214.903375][ T9055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.129486][ T9055] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz.5.1277: bg 0: block 2: invalid block bitmap [ 215.229300][ T9055] EXT4-fs (loop5): Remounting filesystem read-only [ 215.271526][ T9055] EXT4-fs warning (device loop5): ext4_xattr_inode_lookup_create:1605: inode #18: comm syz.5.1277: cleanup dec ref error -28 [ 215.350796][ T5899] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 215.543585][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 215.552223][ T5835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.573081][ T5899] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 215.590701][ T5899] usb 5-1: config 2 has no interface number 0 [ 215.610788][ T5899] usb 5-1: config 2 interface 31 has no altsetting 0 [ 215.676312][ T5899] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 215.685888][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.717326][ T5899] usb 5-1: Product: syz [ 215.743770][ T5899] usb 5-1: Manufacturer: syz [ 215.760664][ T5899] usb 5-1: SerialNumber: syz [ 215.984425][ T9084] loop5: detected capacity change from 0 to 512 [ 216.048253][ T9087] loop0: detected capacity change from 0 to 24 [ 216.072765][ T9084] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 216.188387][ T9084] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.1290: bg 0: block 248: padding at end of block bitmap is not set [ 216.300813][ T5899] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 216.321282][ T9084] Quota error (device loop5): write_blk: dquota write failed [ 216.360828][ T9084] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 216.391087][ T5899] usb 5-1: USB disconnect, device number 6 [ 216.400718][ T9084] EXT4-fs error (device loop5): ext4_acquire_dquot:6925: comm syz.5.1290: Failed to acquire dquot type 1 [ 216.430771][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 216.436871][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 216.443511][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 216.443537][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 216.450428][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 216.450481][ T5852] Bluetooth: hci5: command 0x0406 tx timeout [ 216.452488][ T9059] loop1: detected capacity change from 0 to 32768 [ 216.535762][ T9084] EXT4-fs (loop5): 1 truncate cleaned up [ 216.606676][ T9084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.654031][ T9094] ALSA: mixer_oss: invalid OSS volume '' [ 216.688696][ T9059] ERROR: (device loop1): diAllocAG: nfreeinos = 0, but iag on freelist [ 216.688696][ T9059] [ 216.720891][ T9084] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.735802][ T9097] netlink: 'syz.0.1295': attribute type 7 has an invalid length. [ 216.781190][ T9059] ialloc: diAlloc returned -5! [ 216.796350][ T9084] EXT4-fs: Cannot change quota options when quota turned on [ 217.034920][ T5835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.263541][ T9107] loop4: detected capacity change from 0 to 256 [ 218.111726][ T9129] netlink: 'syz.2.1309': attribute type 1 has an invalid length. [ 218.417177][ T9138] loop1: detected capacity change from 0 to 64 [ 218.587322][ T9142] loop0: detected capacity change from 0 to 1024 [ 218.679222][ T9142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.860422][ T9142] EXT4-fs warning (device loop0): ext4_rmdir:3198: inode #11: comm syz.0.1318: empty directory 'file1' has too many links (111) [ 219.031487][ T9152] mac80211_hwsim hwsim12 : renamed from wlan1 (while UP) [ 219.150907][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.199905][ T9111] loop3: detected capacity change from 0 to 32768 [ 219.234358][ T9111] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 219.479060][ T9111] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 219.605007][ T9111] XFS (loop3): Starting recovery (logdev: internal) [ 219.708921][ T9111] XFS (loop3): Ending recovery (logdev: internal) [ 219.781610][ T51] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 219.972340][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 220.042107][ T51] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.065444][ T5842] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 220.077792][ T51] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 220.093302][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.101461][ T51] usb 1-1: Product: syz [ 220.105664][ T51] usb 1-1: Manufacturer: syz [ 220.110297][ T51] usb 1-1: SerialNumber: syz [ 220.117513][ T51] usb 1-1: config 0 descriptor?? [ 220.129698][ T51] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 220.150949][ T51] usb 1-1: selecting invalid altsetting 1 [ 220.396785][ T9192] loop5: detected capacity change from 0 to 1024 [ 220.569215][ T9192] syz.5.1339: attempt to access beyond end of device [ 220.569215][ T9192] loop5: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 220.620951][ T9192] Buffer I/O error on dev loop5, logical block 100663296, async page read [ 220.639547][ T5884] usb 1-1: USB disconnect, device number 10 [ 220.644110][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1342'. [ 220.685982][ T9192] hfsplus: unable to mark blocks free: error -5 [ 220.746481][ T9192] hfsplus: can't free extent [ 220.807736][ T9201] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 220.850742][ T9201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.901873][ T9203] autofs4:pid:9203:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(43008.1), cmd(0xc018937e) [ 220.962220][ T9203] autofs4:pid:9203:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 221.237692][ T29] audit: type=1326 audit(1740101805.941:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 221.274469][ T9212] loop2: detected capacity change from 0 to 1024 [ 221.302028][ T9212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.340657][ T29] audit: type=1326 audit(1740101805.941:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 221.366564][ T9212] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.420429][ T29] audit: type=1326 audit(1740101805.981:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 221.453999][ T29] audit: type=1326 audit(1740101805.981:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 221.473824][ T9212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.478423][ T29] audit: type=1326 audit(1740101805.981:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9210 comm="syz.4.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 221.620966][ T5884] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 221.702324][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.817959][ T5884] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 221.847999][ T5884] usb 4-1: config 0 has no interface number 0 [ 221.880752][ T5884] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.933249][ T5884] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 221.956868][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.993090][ T5884] usb 4-1: Product: syz [ 221.997882][ T9231] loop4: detected capacity change from 0 to 16 [ 222.017670][ T5884] usb 4-1: Manufacturer: syz [ 222.046305][ T5884] usb 4-1: SerialNumber: syz [ 222.086257][ T9231] erofs (device loop4): mounted with root inode @ nid 36. [ 222.095387][ T5884] usb 4-1: config 0 descriptor?? [ 222.171175][ T5884] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 222.229893][ T9231] syz.4.1355: attempt to access beyond end of device [ 222.229893][ T9231] loop4: rw=0, sector=48, nr_sectors = 16 limit=16 [ 222.321177][ T9231] erofs (device loop4): read error -5 @ 43 of nid 36 [ 222.378481][ C0] yurex 4-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 222.579615][ T5884] usb 4-1: USB disconnect, device number 5 [ 222.632337][ T5884] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 222.670914][ T9242] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 222.875883][ T9247] loop5: detected capacity change from 0 to 8 [ 222.905980][ T9207] loop1: detected capacity change from 0 to 40427 [ 222.924436][ T9247] unable to read id index table [ 222.958621][ T9207] F2FS-fs (loop1): invalid crc value [ 223.005672][ T9207] F2FS-fs (loop1): Found nat_bits in checkpoint [ 223.281890][ T9207] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 223.413875][ T9264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.580778][ T51] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 223.674385][ T5836] syz-executor: attempt to access beyond end of device [ 223.674385][ T5836] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.752522][ T5836] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 223.756079][ T51] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 223.771518][ T51] usb 6-1: config 0 has no interface number 0 [ 223.780123][ T51] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=16.5f [ 223.799818][ T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.823989][ T51] usb 6-1: Product: syz [ 223.828194][ T51] usb 6-1: Manufacturer: syz [ 223.851127][ T51] usb 6-1: SerialNumber: syz [ 223.892488][ T51] usb 6-1: config 0 descriptor?? [ 224.084625][ T9280] vcan0 speed is unknown, defaulting to 1000 [ 224.136213][ T9280] vcan0 speed is unknown, defaulting to 1000 [ 224.144521][ T5936] usb 6-1: USB disconnect, device number 3 [ 224.203375][ T9280] vcan0 speed is unknown, defaulting to 1000 [ 224.661005][ T5884] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 224.688284][ T9288] loop2: detected capacity change from 0 to 4096 [ 224.713385][ T9288] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 224.740050][ T9280] infiniband syz2: set active [ 224.748427][ T5936] vcan0 speed is unknown, defaulting to 1000 [ 224.792140][ T9280] infiniband syz2: added vcan0 [ 224.840957][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 224.868762][ T5884] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.910764][ T5884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.941136][ T5884] usb 5-1: New USB device found, idVendor=1d6b, idProduct=ec01, bcdDevice= 0.2e [ 224.951418][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.959468][ T5884] usb 5-1: Product: syz [ 224.963822][ T5884] usb 5-1: Manufacturer: syz [ 224.968453][ T5884] usb 5-1: SerialNumber: syz [ 225.221823][ T9280] RDS/IB: syz2: added [ 225.226636][ T9280] smc: adding ib device syz2 with port count 1 [ 225.251586][ T9280] smc: ib device syz2 port 1 has pnetid [ 225.294024][ T5936] vcan0 speed is unknown, defaulting to 1000 [ 225.344461][ T9280] vcan0 speed is unknown, defaulting to 1000 [ 225.412832][ T5884] usb 5-1: cannot find UAC_HEADER [ 225.527515][ T5884] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 225.569467][ T5884] usb 5-1: USB disconnect, device number 7 [ 225.722255][ T9311] overlayfs: empty lowerdir [ 225.844752][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.083066][ T9280] vcan0 speed is unknown, defaulting to 1000 [ 226.280964][ T29] audit: type=1326 audit(1740101810.971:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9323 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 226.367896][ T29] audit: type=1326 audit(1740101810.971:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9323 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 226.460708][ T29] audit: type=1326 audit(1740101811.021:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9323 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 226.570858][ T29] audit: type=1326 audit(1740101811.021:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9323 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 226.692151][ T29] audit: type=1326 audit(1740101811.021:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9323 comm="syz.4.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 226.881498][ T9280] vcan0 speed is unknown, defaulting to 1000 [ 227.166053][ T9350] openvswitch: netlink: Multiple metadata blocks provided [ 227.364890][ T9356] loop4: detected capacity change from 0 to 256 [ 227.389882][ T9356] FAT-fs (loop4): Directory bread(block 1285) failed [ 227.434756][ T9356] FAT-fs (loop4): Directory bread(block 1285) failed [ 227.453185][ T9356] FAT-fs (loop4): Directory bread(block 1285) failed [ 227.479543][ T9356] FAT-fs (loop4): Directory bread(block 1285) failed [ 227.497999][ T9280] vcan0 speed is unknown, defaulting to 1000 [ 227.848863][ T9366] loop1: detected capacity change from 0 to 2048 [ 227.936255][ T9366] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 227.996733][ T5896] udevd[5896]: incorrect nilfs2 checksum on /dev/loop1 [ 228.030882][ T9375] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.099285][ T9280] vcan0 speed is unknown, defaulting to 1000 [ 228.231228][ T9377] loop4: detected capacity change from 0 to 1764 [ 228.780563][ T9280] vcan0 speed is unknown, defaulting to 1000 [ 229.187333][ T9400] PKCS8: Unsupported PKCS#8 version [ 229.478748][ T9373] loop0: detected capacity change from 0 to 32768 [ 229.485519][ T9408] openvswitch: netlink: IP tunnel dst address not specified [ 229.544327][ T9412] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1440'. [ 229.567623][ T9373] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1424 (9373) [ 229.629397][ T9373] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.670570][ T9373] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 229.679622][ T9373] BTRFS info (device loop0): using free-space-tree [ 230.073226][ T9373] BTRFS warning (device loop0): get dev_stats failed, device not found [ 230.278123][ T5843] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 230.527999][ T9451] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1455'. [ 230.580734][ T5936] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 230.752736][ T5936] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 230.761263][ T5936] usb 6-1: config 0 has no interface number 0 [ 230.810778][ T5936] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 230.860715][ T5936] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.923591][ T5936] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 230.940941][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.961348][ T5936] usb 6-1: Product: syz [ 230.965596][ T5936] usb 6-1: Manufacturer: syz [ 230.971222][ T9457] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 231.025140][ T5936] usb 6-1: SerialNumber: syz [ 231.040411][ T5936] usb 6-1: config 0 descriptor?? [ 231.047043][ T9447] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.100925][ T5936] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 231.176514][ T5936] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 231.471419][ T9473] AppArmor: change_hat: Invalid input '"' [ 231.604053][ T5884] usb 6-1: USB disconnect, device number 4 [ 231.633965][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1467'. [ 231.670437][ T5884] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 231.709713][ T9479] loop4: detected capacity change from 0 to 256 [ 231.741202][ T5884] cyberjack 6-1:0.69: device disconnected [ 231.813017][ T9479] FAT-fs (loop4): Directory bread(block 64) failed [ 231.857493][ T9479] FAT-fs (loop4): Directory bread(block 65) failed [ 231.870088][ T9483] netlink: 'syz.0.1469': attribute type 21 has an invalid length. [ 231.880991][ T9479] FAT-fs (loop4): Directory bread(block 66) failed [ 231.887644][ T9479] FAT-fs (loop4): Directory bread(block 67) failed [ 231.894729][ T9479] FAT-fs (loop4): Directory bread(block 68) failed [ 231.920716][ T9479] FAT-fs (loop4): Directory bread(block 69) failed [ 231.937777][ T9479] FAT-fs (loop4): Directory bread(block 70) failed [ 231.944571][ T9483] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1469'. [ 232.002491][ T9487] loop2: detected capacity change from 0 to 64 [ 232.019077][ T9479] FAT-fs (loop4): Directory bread(block 71) failed [ 232.063683][ T9479] FAT-fs (loop4): Directory bread(block 72) failed [ 232.070299][ T9479] FAT-fs (loop4): Directory bread(block 73) failed [ 232.546984][ T9501] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1479'. [ 233.269136][ T9521] loop3: detected capacity change from 0 to 8 [ 233.367468][ T9521] SQUASHFS error: Corrupted symlink [ 233.615295][ T9527] loop0: detected capacity change from 0 to 2048 [ 233.699571][ T9527] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 233.883054][ T9495] loop2: detected capacity change from 0 to 32768 [ 233.953977][ T9495] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 234.415933][ T9495] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 234.493776][ T9555] loop0: detected capacity change from 0 to 4096 [ 234.527158][ T9495] XFS (loop2): Starting recovery (logdev: internal) [ 234.588518][ T9562] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.650540][ T9495] XFS (loop2): Ending recovery (logdev: internal) [ 234.713945][ T29] audit: type=1326 audit(1740101819.411:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9a78d0a9 code=0x7ffc0000 [ 234.754690][ T9555] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 234.831596][ T9555] Remounting filesystem read-only [ 234.842585][ T29] audit: type=1326 audit(1740101819.411:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9a78d0a9 code=0x7ffc0000 [ 234.945521][ T29] audit: type=1326 audit(1740101819.461:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f9d9a78d0a9 code=0x7ffc0000 [ 234.964724][ T9568] loop1: detected capacity change from 0 to 1024 [ 235.022345][ T9570] loop3: detected capacity change from 0 to 256 [ 235.026012][ T9568] hfsplus: extend alloc file! (8192,512,16777719) [ 235.050537][ T29] audit: type=1326 audit(1740101819.461:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9a78d0a9 code=0x7ffc0000 [ 235.063592][ T5834] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 235.077098][ T29] audit: type=1326 audit(1740101819.461:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9a78d0a9 code=0x7ffc0000 [ 235.204050][ T9570] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 235.270169][ T9570] FAT-fs (loop3): Filesystem has been set read-only [ 235.472950][ T9576] loop4: detected capacity change from 0 to 1764 [ 235.543170][ T5842] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 235.772051][ T9584] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1517'. [ 236.532627][ T9609] netlink: 'syz.3.1529': attribute type 4 has an invalid length. [ 236.578561][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1529'. [ 237.622491][ T9640] netlink: 'syz.2.1544': attribute type 10 has an invalid length. [ 237.818610][ T9640] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 238.178930][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1550'. [ 238.180497][ T9619] loop5: detected capacity change from 0 to 32768 [ 238.242851][ T9619] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1533 (9619) [ 238.252289][ T9652] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 238.302870][ T9619] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 238.339441][ T9619] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 238.373914][ T9619] BTRFS info (device loop5): using free-space-tree [ 238.544427][ T9673] netlink: 'syz.0.1553': attribute type 2 has an invalid length. [ 238.590818][ T9673] netlink: 'syz.0.1553': attribute type 1 has an invalid length. [ 238.777539][ T5835] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.236353][ T9687] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1556'. [ 239.742798][ T9698] loop3: detected capacity change from 0 to 1764 [ 239.819592][ T9705] loop0: detected capacity change from 0 to 1024 [ 239.870255][ T9705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.092042][ T9705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.271295][ T9715] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1572'. [ 240.439431][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'. [ 240.493820][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.535805][ T9693] loop4: detected capacity change from 0 to 32768 [ 240.558896][ T9693] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1560 (9693) [ 240.608058][ T9693] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 240.686275][ T9693] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 240.730996][ T9693] BTRFS info (device loop4): using free-space-tree [ 241.002038][ T9746] netlink: 'syz.1.1579': attribute type 1 has an invalid length. [ 241.035194][ T9746] netlink: 'syz.1.1579': attribute type 2 has an invalid length. [ 241.282015][ T5854] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 241.512282][ T9756] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1584'. [ 241.561168][ T9756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1584'. [ 241.668361][ T9759] loop0: detected capacity change from 0 to 8 [ 241.701661][ T9759] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 241.755005][ T9759] cramfs: bad data blocksize 4294967270 [ 241.811118][ T9759] cramfs: Error -3 while decompressing! [ 241.828068][ T9759] cramfs: ffffffff9a986702(26)->ffff888078388000(4096) [ 241.884052][ T9759] cramfs: bad data blocksize 3221485902 [ 241.898292][ T9716] loop3: detected capacity change from 0 to 32768 [ 241.910798][ T9759] cramfs: bad data blocksize 4294967270 [ 241.917526][ T29] audit: type=1800 audit(1740101826.621:50): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1586" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 241.937092][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.504585][ T9776] loop5: detected capacity change from 0 to 164 [ 242.593724][ T9776] Unable to read rock-ridge attributes [ 242.621045][ T9778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1596'. [ 242.643383][ T9776] Unable to read rock-ridge attributes [ 242.941505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 242.961648][ T5851] Bluetooth: hci4: unexpected event for opcode 0x0c24 [ 243.338245][ T9801] loop4: detected capacity change from 0 to 64 [ 243.438310][ T9797] loop2: detected capacity change from 0 to 4096 [ 243.566629][ T9797] ntfs3(loop2): ino=19, mi_enum_attr [ 243.585885][ T9797] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 244.128165][ T5851] Bluetooth: hci5: unexpected event for opcode 0x0c26 [ 244.140053][ T9823] overlayfs: cannot append lower layer [ 245.251419][ T9857] : entered promiscuous mode [ 245.525129][ T5851] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 245.573466][ T9865] @ÿ: renamed from bond_slave_0 (while UP) [ 245.624280][ T9827] loop1: detected capacity change from 0 to 32768 [ 245.692307][ T9827] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1620 (9827) [ 245.842565][ T9827] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 245.888564][ T9827] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 245.909535][ T9827] BTRFS info (device loop1): disk space caching is enabled [ 245.961838][ T9827] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 246.272979][ T9827] BTRFS info (device loop1): rebuilding free space tree [ 246.373026][ T9827] BTRFS info (device loop1): disabling free space tree [ 246.400758][ T9827] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 246.430814][ T9827] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 246.431399][ T9904] netlink: 'syz.4.1648': attribute type 9 has an invalid length. [ 246.465506][ T9904] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1648'. [ 246.625278][ T9908] netlink: 'syz.5.1651': attribute type 1 has an invalid length. [ 246.653645][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1651'. [ 246.871072][ T9912] xt_l2tp: invalid flags combination: c [ 246.888719][ T5836] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 247.070872][ T9918] netlink: 'syz.5.1656': attribute type 2 has an invalid length. [ 247.698857][ T9887] loop0: detected capacity change from 0 to 32768 [ 247.767199][ T9887] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1646 (9887) [ 247.840088][ T9887] BTRFS info (device loop0 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 247.910840][ T9887] BTRFS info (device loop0 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 247.914135][ T9936] openvswitch: netlink: Actions may not be safe on all matching packets [ 247.969600][ T9887] BTRFS info (device loop0 state S): using free-space-tree [ 247.998396][ T9940] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1667'. [ 248.024045][ T9940] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1667'. [ 248.431960][ T5843] BTRFS info (device loop0 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 248.969391][ T9984] loop1: detected capacity change from 0 to 1024 [ 249.002848][ T9984] EXT4-fs: Ignoring removed bh option [ 249.008335][ T9984] EXT4-fs: inline encryption not supported [ 249.075032][ T9986] ip6gretap1: entered allmulticast mode [ 249.089774][ T9984] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 249.172697][ T9984] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 249.248246][ T9984] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 2: comm syz.1.1678: lblock 2 mapped to illegal pblock 2 (length 1) [ 249.342125][ T9984] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 249.376488][ T9984] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 48: comm syz.1.1678: lblock 0 mapped to illegal pblock 48 (length 1) [ 249.418266][ T9988] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.450937][ T9984] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 249.487550][ T9984] EXT4-fs error (device loop1): ext4_acquire_dquot:6925: comm syz.1.1678: Failed to acquire dquot type 0 [ 249.531957][ T9984] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 249.640099][ T9984] EXT4-fs error (device loop1): ext4_evict_inode:256: inode #11: comm syz.1.1678: mark_inode_dirty error [ 249.663351][ T9984] EXT4-fs warning (device loop1): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 249.674000][ T9984] EXT4-fs (loop1): 1 orphan inode deleted [ 249.682080][ T9984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.695169][ T61] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 249.730548][ T61] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 249.740532][ T61] EXT4-fs error (device loop1): ext4_release_dquot:6948: comm kworker/u8:4: Failed to release dquot type 0 [ 249.841153][ T61] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 2: comm kworker/u8:4: lblock 2 mapped to illegal pblock 2 (length 1) [ 249.940078][ T61] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 249.980817][ T61] EXT4-fs error (device loop1): ext4_write_dquot:6905: comm kworker/u8:4: Failed to commit dquot type 0 [ 250.032199][ T61] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 250.103604][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.142185][ T5836] EXT4-fs error (device loop1): __ext4_get_inode_loc:4434: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 250.158209][ T9973] loop2: detected capacity change from 0 to 32768 [ 250.181471][ T9973] XFS: attr2 mount option is deprecated. [ 250.215727][ T5836] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 250.234223][T10013] loop3: detected capacity change from 0 to 512 [ 250.257542][T10013] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 250.266565][ T5836] EXT4-fs error (device loop1): ext4_quota_off:7194: inode #3: comm syz-executor: mark_inode_dirty error [ 250.267763][ T9973] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 250.329629][T10013] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 250.417904][T10013] EXT4-fs (loop3): 1 truncate cleaned up [ 250.489516][T10013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.625634][T10024] Cannot find map_set index 0 as target [ 250.678487][ T9973] XFS (loop2): Ending clean mount [ 250.754068][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.830316][ T9973] XFS (loop2): Quotacheck needed: Please wait. [ 250.950730][ T9973] XFS (loop2): Quotacheck: Done. [ 251.250840][ T5834] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 251.262876][T10038] netlink: 'syz.1.1699': attribute type 4 has an invalid length. [ 251.280884][T10002] loop5: detected capacity change from 0 to 32768 [ 251.300123][T10038] netlink: 'syz.1.1699': attribute type 11 has an invalid length. [ 251.353114][T10040] delete_channel: no stack [ 251.358341][T10038] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1699'. [ 251.382202][T10002] jfs_strtoUCS: char2uni returned -22. [ 251.387710][T10002] charset = iso8859-6, char = 0xfc [ 252.423405][ T29] audit: type=1326 audit(1740101837.121:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10062 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 252.525582][ T29] audit: type=1326 audit(1740101837.171:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10062 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 252.548457][T10068] xt_l2tp: v2 doesn't support IP mode [ 252.557444][T10031] loop3: detected capacity change from 0 to 32768 [ 252.623134][ T29] audit: type=1326 audit(1740101837.181:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10062 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 252.712300][ T29] audit: type=1326 audit(1740101837.181:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10062 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 252.844458][ T29] audit: type=1326 audit(1740101837.181:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10062 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaa18d0a9 code=0x7ffc0000 [ 253.256806][T10087] loop1: detected capacity change from 0 to 4096 [ 253.302118][T10087] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 253.511054][T10087] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 253.511054][T10087] [ 253.634319][T10097] netlink: 'syz.0.1726': attribute type 26 has an invalid length. [ 253.995635][T10105] loop1: detected capacity change from 0 to 512 [ 254.052423][T10105] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 254.077005][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1718'. [ 254.148257][T10105] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1730: iget: bad extended attribute block 19 [ 254.193847][T10105] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.1730: couldn't read orphan inode 15 (err -117) [ 254.215097][T10116] loop2: detected capacity change from 0 to 64 [ 254.300437][T10105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.429514][T10116] nfs: Deprecated parameter 'nointr' [ 254.519210][T10099] loop4: detected capacity change from 0 to 32768 [ 254.557198][T10099] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1727 (10099) [ 254.581507][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.679952][T10099] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 254.730734][T10099] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 254.766910][T10099] BTRFS info (device loop4): using free-space-tree [ 255.059942][T10148] loop0: detected capacity change from 0 to 256 [ 255.264465][T10148] FAT-fs (loop0): Directory bread(block 64) failed [ 255.266015][T10153] cgroup: Name too long [ 255.292459][T10148] FAT-fs (loop0): Directory bread(block 65) failed [ 255.320817][T10148] FAT-fs (loop0): Directory bread(block 66) failed [ 255.327405][T10148] FAT-fs (loop0): Directory bread(block 67) failed [ 255.341396][ T5854] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 255.371434][T10148] FAT-fs (loop0): Directory bread(block 68) failed [ 255.378005][T10148] FAT-fs (loop0): Directory bread(block 69) failed [ 255.410797][T10148] FAT-fs (loop0): Directory bread(block 70) failed [ 255.427689][T10148] FAT-fs (loop0): Directory bread(block 71) failed [ 255.455225][T10148] FAT-fs (loop0): Directory bread(block 72) failed [ 255.511085][T10148] FAT-fs (loop0): Directory bread(block 73) failed [ 255.901818][T10164] loop5: detected capacity change from 0 to 1024 [ 255.985643][T10164] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 256.090233][T10164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.218170][T10164] EXT4-fs warning (device loop5): empty_inline_dir:1837: bad inline directory (dir #12) - no `..' [ 256.393662][ T5835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.403697][T10177] loop2: detected capacity change from 0 to 128 [ 256.440302][T10177] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 256.507372][T10177] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.560518][T10183] loop1: detected capacity change from 0 to 128 [ 256.662363][T10183] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.688546][T10185] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1758'. [ 256.783102][T10183] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.825879][T10192] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1760'. [ 256.856939][T10192] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1760'. [ 256.900886][T10192] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1760'. [ 256.935919][T10183] EXT4-fs warning (device loop1): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 257.290905][ T5836] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.574913][T10210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1769'. [ 257.812276][T10210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1769'. [ 258.228644][T10221] netlink: 320 bytes leftover after parsing attributes in process `syz.1.1774'. [ 258.299110][T10194] loop3: detected capacity change from 0 to 32768 [ 258.300096][T10194] XFS: attr2 mount option is deprecated. [ 258.326543][T10194] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 258.363066][T10198] loop5: detected capacity change from 0 to 32768 [ 258.459224][T10198] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 258.652073][T10194] XFS (loop3): Ending clean mount [ 258.657924][T10198] XFS (loop5): Ending clean mount [ 258.700043][T10194] XFS (loop3): Quotacheck needed: Please wait. [ 258.760640][T10194] XFS (loop3): Quotacheck: Done. [ 258.814325][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 258.924669][ T5835] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 258.993191][ T5842] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 259.077565][T10213] loop2: detected capacity change from 0 to 32768 [ 260.413444][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.419792][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.463821][T10280] loop0: detected capacity change from 0 to 1024 [ 260.521824][T10280] hfsplus: filesystem is marked journaled, leaving read-only. [ 260.578063][T10285] loop5: detected capacity change from 0 to 256 [ 260.624549][ T29] audit: type=1400 audit(1740101845.331:56): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 256 bytes leftover after parsing attributes in process `syz.2.1801'. [ 260.675507][T10285] FAT-fs (loop5): Directory bread(block 64) failed [ 260.742409][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.841646][T10285] FAT-fs (loop5): Directory bread(block 65) failed [ 260.848312][T10285] FAT-fs (loop5): Directory bread(block 66) failed [ 260.928444][T10285] FAT-fs (loop5): Directory bread(block 67) failed [ 260.945508][T10285] FAT-fs (loop5): Directory bread(block 68) failed [ 260.959477][T10285] FAT-fs (loop5): Directory bread(block 69) failed [ 260.986959][T10285] FAT-fs (loop5): Directory bread(block 70) failed [ 260.998417][T10295] loop3: detected capacity change from 0 to 512 [ 261.026535][T10295] EXT4-fs: Ignoring removed orlov option [ 261.050993][T10285] FAT-fs (loop5): Directory bread(block 71) failed [ 261.057662][T10285] FAT-fs (loop5): Directory bread(block 72) failed [ 261.103852][T10295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.116959][T10285] FAT-fs (loop5): Directory bread(block 73) failed [ 261.147786][T10295] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.182899][T10302] loop4: detected capacity change from 0 to 24 [ 261.189879][T10302] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 261.263192][T10295] EXT4-fs error (device loop3): ext4_empty_dir:3094: inode #12: comm syz.3.1805: invalid size [ 261.276399][T10304] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 261.293341][T10302] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 261.367991][T10306] netlink: 'syz.2.1808': attribute type 3 has an invalid length. [ 261.383638][T10302] VFS: Lookup of 'file0' in romfs loop4 would have caused loop [ 261.486357][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.666885][T10310] loop1: detected capacity change from 0 to 512 [ 261.696764][T10310] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 261.891994][T10320] openvswitch: netlink: IP tunnel dst address not specified [ 262.114548][T10322] Zero length message leads to an empty skb [ 262.115731][T10314] loop3: detected capacity change from 0 to 4096 [ 262.599137][T10338] loop4: detected capacity change from 0 to 1024 [ 262.692921][T10338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.059496][ T5854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.581136][T10371] netlink: 'syz.0.1839': attribute type 8 has an invalid length. [ 264.001891][T10383] netlink: 'syz.4.1846': attribute type 12 has an invalid length. [ 264.028534][T10385] loop3: detected capacity change from 0 to 512 [ 265.697525][T10428] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1868'. [ 266.033973][T10396] loop5: detected capacity change from 0 to 32768 [ 266.057382][T10436] loop0: detected capacity change from 0 to 164 [ 266.153927][T10396] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 266.291728][T10396] (syz.5.1851,10396,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 266.329141][T10396] (syz.5.1851,10396,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 266.379819][T10396] (syz.5.1851,10396,0):ocfs2_mknod:502 ERROR: status = -117 [ 266.430421][T10396] (syz.5.1851,10396,0):ocfs2_mkdir:658 ERROR: status = -117 [ 266.492099][T10444] loop1: detected capacity change from 0 to 1024 [ 266.635153][T10444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.801439][ T5835] ocfs2: Unmounting device (7,5) on (node local) [ 266.922769][T10455] loop0: detected capacity change from 0 to 64 [ 267.013059][T10423] loop2: detected capacity change from 0 to 32768 [ 267.429380][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.733097][T10463] loop0: detected capacity change from 0 to 4096 [ 267.780918][T10463] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 267.919041][T10463] ntfs3(loop0): ino=19, mi_enum_attr [ 267.950882][T10463] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 268.720250][T10497] loop5: detected capacity change from 0 to 64 [ 269.358860][T10503] loop4: detected capacity change from 0 to 8192 [ 269.387879][T10503] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 269.480966][T10515] netlink: 'syz.1.1907': attribute type 12 has an invalid length. [ 269.510514][T10515] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1907'. [ 269.778442][T10521] loop2: detected capacity change from 0 to 128 [ 269.822879][T10521] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 269.908664][T10521] FAT-fs (loop2): FAT read failed (blocknr 234) [ 270.042820][T10529] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 270.411424][T10540] loop5: detected capacity change from 0 to 512 [ 270.512238][T10540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.631681][T10540] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.804045][T10550] netlink: 'syz.2.1924': attribute type 2 has an invalid length. [ 270.837240][T10550] netlink: 'syz.2.1924': attribute type 1 has an invalid length. [ 270.864356][T10550] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1924'. [ 270.893176][T10550] nbd: couldn't find device at index 1568768 [ 270.989897][ T5835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.023523][T10554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1926'. [ 271.054127][T10554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1926'. [ 271.090951][T10554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1926'. [ 271.258023][T10535] loop1: detected capacity change from 0 to 32768 [ 271.319204][T10561] vivid-007: ================= START STATUS ================= [ 271.327985][T10554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1926'. [ 271.334959][T10561] vivid-007: Generate PTS: true [ 271.349055][T10554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1926'. [ 271.380759][T10561] vivid-007: Generate SCR: true [ 271.386216][T10554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1926'. [ 271.420670][T10561] tpg source WxH: 640x360 (Y'CbCr) [ 271.426027][T10561] tpg field: 1 [ 271.436356][T10561] tpg crop: 640x360@0x0 [ 271.450961][T10561] tpg compose: 640x360@0x0 [ 271.466702][T10561] tpg colorspace: 8 [ 271.486730][T10561] tpg transfer function: 0/0 [ 271.500692][T10561] tpg Y'CbCr encoding: 0/0 [ 271.517602][T10561] tpg quantization: 0/0 [ 271.539694][T10561] tpg RGB range: 0/2 [ 271.569675][T10561] vivid-007: ================== END STATUS ================== [ 271.780129][T10554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1926'. [ 271.831363][T10554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1926'. [ 271.891044][T10554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1926'. [ 271.911374][T10541] loop4: detected capacity change from 0 to 32768 [ 271.979014][T10541] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1919 (10541) [ 272.058025][T10541] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 272.111801][T10541] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 272.140697][T10541] BTRFS info (device loop4): disk space caching is enabled [ 272.190709][T10541] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 272.451981][T10541] BTRFS info (device loop4): rebuilding free space tree [ 272.541986][T10541] BTRFS info (device loop4): disabling free space tree [ 272.588980][T10541] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 272.670315][T10541] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 272.697200][T10597] Unknown options in mask 5 [ 272.722737][T10558] loop2: detected capacity change from 0 to 32768 [ 273.206183][ T5854] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 274.264316][T10627] loop3: detected capacity change from 0 to 4096 [ 274.320794][T10627] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 274.453562][T10639] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 274.488787][T10634] netlink: set zone limit has 4 unknown bytes [ 274.827907][T10648] loop5: detected capacity change from 0 to 1024 [ 274.888615][T10648] hfsplus: bad catalog entry type [ 275.034997][T10652] loop1: detected capacity change from 0 to 1024 [ 275.073583][ T52] hfsplus: b-tree write err: -5, ino 4 [ 275.092704][T10652] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 275.140768][T10652] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 275.204639][T10652] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #32: comm syz.1.1965: iget: special inode unallocated [ 275.280076][T10652] EXT4-fs (loop1): no journal found [ 275.320875][T10652] EXT4-fs (loop1): can't get journal size [ 275.342651][T10652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 275.403723][T10652] EXT4-fs error (device loop1): ext4_lookup:1805: inode #2: comm syz.1.1965: bad inode number: 12 [ 275.718339][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.735060][T10674] dvmrp0: entered allmulticast mode [ 276.416815][T10690] __nla_validate_parse: 2 callbacks suppressed [ 276.416838][T10690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1983'. [ 276.500787][T10690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1983'. [ 276.521918][T10692] loop5: detected capacity change from 0 to 1024 [ 276.680882][T10696] netlink: 'syz.2.1985': attribute type 10 has an invalid length. [ 276.862373][T10657] loop0: detected capacity change from 0 to 32768 [ 276.887498][T10657] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1967 (10657) [ 276.988414][T10657] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 277.025775][T10657] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 277.072393][T10657] BTRFS info (device loop0): using free-space-tree [ 277.761658][ T5843] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 278.086971][T10744] Cannot find del_set index 4 as target [ 278.414924][T10752] loop3: detected capacity change from 0 to 512 [ 278.527279][T10752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.540073][T10752] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.826569][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.766039][T10754] loop2: detected capacity change from 0 to 32768 [ 279.863051][T10754] [ 279.863051][T10754] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 279.863051][T10754] [ 279.953646][T10754] [ 279.953646][T10754] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 279.953646][T10754] [ 280.015051][T10754] [ 280.015051][T10754] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.015051][T10754] [ 280.133581][ T113] [ 280.133581][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.133581][ T113] [ 280.231227][ T5834] [ 280.231227][ T5834] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.231227][ T5834] [ 280.272505][ T5834] [ 280.272505][ T5834] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.272505][ T5834] [ 280.323284][T10761] loop1: detected capacity change from 0 to 32768 [ 280.354759][T10760] loop0: detected capacity change from 0 to 40427 [ 280.418288][T10785] loop5: detected capacity change from 0 to 4096 [ 280.432054][T10760] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 280.449271][T10761] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 280.472868][T10760] F2FS-fs (loop0): Found nat_bits in checkpoint [ 280.558657][T10785] EXT4-fs (loop5): Test dummy encryption mode enabled [ 280.567617][T10760] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 280.582445][T10761] XFS (loop1): Ending clean mount [ 280.611086][T10761] XFS (loop1): Quotacheck needed: Please wait. [ 280.655186][T10785] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 280.719667][T10761] XFS (loop1): Quotacheck: Done. [ 280.726184][T10785] System zones: 0-5 [ 280.748484][T10787] loop3: detected capacity change from 0 to 4096 [ 280.753056][T10785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.791507][T10787] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 280.837042][T10785] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.863260][T10787] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 280.978684][T10775] loop4: detected capacity change from 0 to 32768 [ 281.021072][ T5836] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 281.056318][T10787] ntfs3(loop3): ino=1e, mi_enum_attr [ 281.081085][T10775] ERROR: (device loop4): dtSearch: DT_GETPAGE: dtree page corrupt [ 281.081085][T10775] [ 281.103855][T10787] ntfs3(loop3): ino=1e, mi_enum_attr [ 281.116911][T10775] ERROR: (device loop4): remounting filesystem as read-only [ 281.127006][T10775] jfs_lookup: dtSearch returned -5 [ 281.282873][T10800] loop2: detected capacity change from 0 to 64 [ 281.567798][T10802] netlink: 26 bytes leftover after parsing attributes in process `syz.5.2028'. [ 282.470769][T10832] netlink: 'syz.2.2039': attribute type 16 has an invalid length. [ 282.501632][T10832] netlink: 'syz.2.2039': attribute type 17 has an invalid length. [ 282.627168][T10832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.796413][T10842] ip6t_srh: unknown srh match flags 4001 [ 282.940833][ T5898] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 283.041929][T10848] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 283.088334][T10850] loop2: detected capacity change from 0 to 1764 [ 283.125497][ T5898] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=ba.c5 [ 283.171161][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.179317][ T5898] usb 4-1: Product: syz [ 283.184881][T10850] tmpfs: Bad value for 'mpol' [ 283.205902][ T5898] usb 4-1: Manufacturer: syz [ 283.230642][ T5898] usb 4-1: SerialNumber: syz [ 283.269947][ T5898] usb 4-1: config 0 descriptor?? [ 283.334375][ T5898] comedi comedi0: Wrong number of endpoints [ 283.350648][ T5898] ni6501 4-1:0.0: driver 'ni6501' failed to auto-configure device. [ 283.599783][ T5902] usb 4-1: USB disconnect, device number 6 [ 284.159015][T10880] netlink: zone id is out of range [ 284.175386][T10880] netlink: zone id is out of range [ 284.210417][T10880] netlink: zone id is out of range [ 284.225607][T10880] netlink: zone id is out of range [ 284.261070][T10880] netlink: zone id is out of range [ 284.281374][T10880] netlink: zone id is out of range [ 284.291496][T10880] netlink: zone id is out of range [ 284.339823][T10880] netlink: zone id is out of range [ 284.341901][T10882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2064'. [ 284.935921][ T29] audit: type=1326 audit(1740101869.641:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.2.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159338d0a9 code=0x7ffc0000 [ 285.071856][ T29] audit: type=1326 audit(1740101869.681:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.2.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159338d0a9 code=0x7ffc0000 [ 285.114123][T10865] loop0: detected capacity change from 0 to 32768 [ 285.161385][ T29] audit: type=1326 audit(1740101869.681:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.2.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f159338d0a9 code=0x7ffc0000 [ 285.271097][T10908] loop3: detected capacity change from 0 to 128 [ 285.300843][ T29] audit: type=1326 audit(1740101869.681:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.2.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159338d0a9 code=0x7ffc0000 [ 285.331348][T10908] EXT4-fs (loop3): Test dummy encryption mode enabled [ 285.380773][ T29] audit: type=1326 audit(1740101869.681:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.2.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159338d0a9 code=0x7ffc0000 [ 285.404506][T10908] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 285.469971][T10908] ext4 filesystem being mounted at /337/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 285.548591][ T29] audit: type=1800 audit(1740101869.951:62): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2056" name="file2" dev="loop0" ino=7 res=0 errno=0 [ 286.358971][T10908] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 286.400521][T10908] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.2077: bg 0: bad block bitmap checksum [ 286.473503][T10929] bridge1: entered promiscuous mode [ 286.645340][T10935] loop1: detected capacity change from 0 to 512 [ 286.681861][ T5842] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.701766][T10935] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 286.797504][T10935] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2088: corrupted in-inode xattr: e_value out of bounds [ 286.928583][T10935] EXT4-fs (loop1): Remounting filesystem read-only [ 286.965715][T10935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.027210][T10945] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 287.223715][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.549710][T10960] netlink: 'syz.1.2098': attribute type 1 has an invalid length. [ 287.580716][T10960] netlink: 'syz.1.2098': attribute type 1 has an invalid length. [ 287.592352][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2102'. [ 287.603871][T10963] loop5: detected capacity change from 0 to 1024 [ 287.640826][T10964] net_ratelimit: 11 callbacks suppressed [ 287.640851][T10964] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 288.244628][T10982] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 288.341659][ T5884] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 288.469382][T10991] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2115'. [ 288.534250][ T5884] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.550695][ T5884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 288.570372][ T5884] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 288.610710][ T5884] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 288.654605][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.692546][T10976] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 288.712715][ T5884] hub 5-1:1.0: bad descriptor, ignoring hub [ 288.745148][ T5884] hub 5-1:1.0: probe with driver hub failed with error -5 [ 288.761305][ T5884] cdc_wdm 5-1:1.0: skipping garbage [ 288.803597][ T5884] cdc_wdm 5-1:1.0: skipping garbage [ 288.885197][ T5884] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 288.910703][ T5884] cdc_wdm 5-1:1.0: Unknown control protocol [ 288.969701][ T5884] usb 5-1: USB disconnect, device number 8 [ 289.257308][T11011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2125'. [ 289.333076][T11014] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 289.858944][ T5884] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 290.051545][ T5884] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 290.091244][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.099405][ T5884] usb 3-1: Product: syz [ 290.124183][ T5884] usb 3-1: Manufacturer: syz [ 290.128852][ T5884] usb 3-1: SerialNumber: syz [ 290.206449][ T5884] r8152-cfgselector 3-1: Unknown version 0x0000 [ 290.218198][T11037] loop5: detected capacity change from 0 to 1024 [ 290.236522][ T5884] r8152-cfgselector 3-1: config 0 descriptor?? [ 290.297522][T11037] hfsplus: bad catalog entry type [ 290.316750][ T29] audit: type=1326 audit(1740101875.021:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11039 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeef18d0a9 code=0x7ffc0000 [ 290.420465][ T29] audit: type=1326 audit(1740101875.051:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11039 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeef18d0a9 code=0x7ffc0000 [ 290.497385][ T29] audit: type=1326 audit(1740101875.061:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11039 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7feeef18d0a9 code=0x7ffc0000 [ 290.608713][ T29] audit: type=1326 audit(1740101875.061:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11039 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeef18d0a9 code=0x7ffc0000 [ 290.660685][ T5898] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 290.676832][ T29] audit: type=1326 audit(1740101875.061:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11039 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeef18d0a9 code=0x7ffc0000 [ 290.719482][T11015] loop1: detected capacity change from 0 to 32768 [ 290.735798][T11015] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2126 (11015) [ 290.756241][ T5899] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 290.787331][T11015] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 290.812455][T11015] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 290.891729][T11015] BTRFS info (device loop1): using free-space-tree [ 290.893825][ T5898] usb 5-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=c8.d3 [ 290.920736][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.928817][ T5898] usb 5-1: Product: syz [ 290.950683][ T5898] usb 5-1: Manufacturer: syz [ 290.955354][ T5898] usb 5-1: SerialNumber: syz [ 290.964071][ T5898] usb 5-1: config 0 descriptor?? [ 291.091720][T11067] bridge3: entered promiscuous mode [ 291.223766][ T5898] cdc_subset 5-1:0.0: probe with driver cdc_subset failed with error -22 [ 291.247808][ T5884] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 291.286749][ T5836] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 291.457885][ T5903] usb 5-1: USB disconnect, device number 9 [ 291.475207][ T5884] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.518956][ T5884] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.564178][ T5884] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 291.581036][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.620471][ T5884] usb 4-1: SerialNumber: syz [ 291.678442][ T5884] usb 4-1: 0:2 : does not exist [ 291.899366][T11081] loop0: detected capacity change from 0 to 512 [ 291.962896][T11081] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 292.089358][T11081] EXT4-fs (loop0): 1 truncate cleaned up [ 292.103357][ T5884] usb 4-1: USB disconnect, device number 7 [ 292.137094][T11081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.308846][T11081] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 292.519709][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.539458][T11097] loop5: detected capacity change from 0 to 2048 [ 292.592165][T11097] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 292.619657][T11097] NILFS (loop5): mounting unchecked fs [ 292.626694][T11101] loop4: detected capacity change from 0 to 64 [ 292.675806][T11101] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 292.682198][T11103] netlink: 'syz.1.2163': attribute type 10 has an invalid length. [ 292.726439][ T6030] udevd[6030]: incorrect nilfs2 checksum on /dev/loop5 [ 292.737721][T11103] hsr0: entered promiscuous mode [ 292.746714][T11101] hfs: filesystem is marked locked, mounting read-only. [ 292.798717][T11097] NILFS (loop5): recovery complete [ 292.875147][T11106] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.030426][T11113] loop0: detected capacity change from 0 to 512 [ 293.092794][T11113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.121307][T11113] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.192247][T11118] loop1: detected capacity change from 0 to 256 [ 293.335898][T11113] fs-verity (loop0, inode 15): Unrecognized descriptor size: 0 bytes [ 293.594874][T11132] loop2: detected capacity change from 0 to 256 [ 293.623051][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.750557][T11136] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2176'. [ 296.007062][T11158] loop1: detected capacity change from 0 to 32768 [ 296.015373][T11158] XFS: noikeep mount option is deprecated. [ 296.264423][T11212] loop4: detected capacity change from 0 to 256 [ 296.281230][T11158] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 296.460767][T11212] FAT-fs (loop4): Directory bread(block 64) failed [ 296.499671][T11212] FAT-fs (loop4): Directory bread(block 65) failed [ 296.530385][T11212] FAT-fs (loop4): Directory bread(block 66) failed [ 296.557807][T11212] FAT-fs (loop4): Directory bread(block 67) failed [ 296.595310][T11212] FAT-fs (loop4): Directory bread(block 68) failed [ 296.636023][T11212] FAT-fs (loop4): Directory bread(block 69) failed [ 296.711864][T11212] FAT-fs (loop4): Directory bread(block 70) failed [ 296.736558][T11212] FAT-fs (loop4): Directory bread(block 71) failed [ 296.769881][T11212] FAT-fs (loop4): Directory bread(block 72) failed [ 296.780737][T11158] XFS (loop1): Ending clean mount [ 296.790836][T11212] FAT-fs (loop4): Directory bread(block 73) failed [ 296.808572][T11158] XFS (loop1): Quotacheck needed: Please wait. [ 297.000044][T11229] syz.3.2218 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 297.041227][T11158] XFS (loop1): Quotacheck: Done. [ 297.366259][ T5836] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.468742][T11242] loop3: detected capacity change from 0 to 2048 [ 297.611553][T11242] loop3: p1 < > p4 [ 297.661348][T11242] loop3: p4 size 8388608 extends beyond EOD, truncated [ 297.804661][ T5205] loop3: p1 < > p4 [ 297.831814][ T5205] loop3: p4 size 8388608 extends beyond EOD, truncated [ 298.220247][ T5896] udevd[5896]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 298.275106][ T6030] udevd[6030]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 298.460454][ T5896] udevd[5896]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 298.492268][ T6030] udevd[6030]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 298.762548][T11267] loop1: detected capacity change from 0 to 1764 [ 299.277007][T11286] sit0: entered promiscuous mode [ 299.324231][T11288] loop5: detected capacity change from 0 to 512 [ 299.334079][T11288] journal_path: Non-blockdev passed as './file0' [ 299.337076][T11286] netlink: 'syz.0.2245': attribute type 1 has an invalid length. [ 299.340466][T11288] EXT4-fs: error: could not find journal device path [ 299.405157][T11286] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2245'. [ 299.772579][T11300] netlink: 'syz.1.2253': attribute type 3 has an invalid length. [ 299.855050][T11302] loop5: detected capacity change from 0 to 128 [ 299.929032][T11302] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.971188][T11302] ext4 filesystem being mounted at /392/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 300.076941][T11314] xt_SECMARK: invalid mode: 0 [ 300.373443][ T5835] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 300.715801][T11329] loop3: detected capacity change from 0 to 1764 [ 300.871101][T11334] netlink: 'syz.4.2269': attribute type 13 has an invalid length. [ 301.183106][T11334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.513230][T11352] program syz.2.2278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.526806][T11356] tmpfs: Bad value for 'mpol' [ 301.743883][T11362] loop0: detected capacity change from 0 to 128 [ 301.825591][T11362] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.900116][T11362] ext4 filesystem being mounted at /384/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 301.974621][T11371] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2285'. [ 302.030878][T11362] EXT4-fs warning (device loop0): __ext4_ioctl:1257: Setting inode version is not supported with metadata_csum enabled. [ 302.287644][ T5843] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.091516][T11403] loop0: detected capacity change from 0 to 2048 [ 303.183599][T11410] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.523317][T11418] loop4: detected capacity change from 0 to 1024 [ 303.613861][T11418] hfsplus: bad catalog entry type [ 304.658496][T11458] loop2: detected capacity change from 0 to 1024 [ 304.720761][ T5900] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 304.820772][ T5884] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 304.895535][ T5900] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 304.925958][ T5900] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.971050][ T5900] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 304.980092][ T5900] usb 1-1: config 1 has no interface number 1 [ 304.997823][ T5884] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 305.010660][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.018782][ T5900] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 305.049535][ T5884] usb 6-1: config 0 descriptor?? [ 305.064703][ T5884] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 305.075934][T11468] loop4: detected capacity change from 0 to 256 [ 305.082748][ T5900] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.112297][T11468] exfat: Deprecated parameter 'utf8' [ 305.125975][ T5900] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.152793][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.175496][ T5900] usb 1-1: Product: syz [ 305.204988][T11468] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5b52992a, utbl_chksum : 0xe619d30d) [ 305.229814][ T5900] usb 1-1: Manufacturer: syz [ 305.239347][T11472] netlink: 'syz.1.2336': attribute type 1 has an invalid length. [ 305.249525][ T5900] usb 1-1: SerialNumber: syz [ 305.273326][T11472] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2336'. [ 305.370843][T11474] netlink: 'syz.3.2337': attribute type 1 has an invalid length. [ 305.485114][ T5884] gspca_stv06xx: I2C: Read error writing address: -71 [ 305.514471][ T5900] usb 1-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 305.525981][ T5884] usb 6-1: USB disconnect, device number 5 [ 305.571769][ T5900] usb 1-1: MIDIStreaming interface descriptor not found [ 305.730927][ T5900] usb 1-1: USB disconnect, device number 11 [ 306.049052][T11489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2343'. [ 306.129660][T11490] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.205572][T11477] udevd[11477]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.233217][T11492] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 306.479358][T11498] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 307.126747][ T5898] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 307.178934][T11523] overlayfs: overlapping lowerdir path [ 307.300259][ T5898] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 307.338668][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.363263][ T5898] usb 4-1: config 0 descriptor?? [ 307.386978][ T5898] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 307.407853][T11529] openvswitch: netlink: Actions may not be safe on all matching packets [ 307.830439][ T5898] gp8psk: usb out operation failed. [ 307.848753][ T5898] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 307.910745][ T5898] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 307.981369][ T5898] usb 4-1: USB disconnect, device number 8 [ 308.167684][T11551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2374'. [ 308.364743][T11556] loop4: detected capacity change from 0 to 256 [ 308.422404][T11556] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 308.490495][T11560] netlink: 'syz.0.2378': attribute type 13 has an invalid length. [ 308.519605][T11563] IPv6: Can't replace route, no match found [ 308.988114][T11560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.519351][T11566] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 309.532295][T11554] loop2: detected capacity change from 0 to 32768 [ 309.539607][T11554] XFS: noikeep mount option is deprecated. [ 309.630957][T11554] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 309.680871][ T5898] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 309.860839][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 309.877413][T11554] XFS (loop2): Ending clean mount [ 309.895851][ T5898] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 309.896339][T11554] XFS (loop2): Quotacheck needed: Please wait. [ 309.931538][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.951268][ T5898] usb 5-1: Product: syz [ 309.955492][ T5898] usb 5-1: Manufacturer: syz [ 309.987696][ T5898] usb 5-1: SerialNumber: syz [ 310.024874][ T5898] r8152-cfgselector 5-1: Unknown version 0x0000 [ 310.034450][ T5898] r8152-cfgselector 5-1: config 0 descriptor?? [ 310.106799][T11554] XFS (loop2): Quotacheck: Done. [ 310.128352][T11607] loop5: detected capacity change from 0 to 512 [ 310.159799][T11607] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 310.202554][T11607] System zones: 1-12 [ 310.218455][T11607] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.2397: invalid indirect mapped block 8 (level 2) [ 310.289884][T11607] EXT4-fs (loop5): Remounting filesystem read-only [ 310.359289][T11607] EXT4-fs (loop5): 1 truncate cleaned up [ 310.366918][T11607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.453194][ T5835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.520015][ T5834] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 310.550012][ T5898] r8152-cfgselector 5-1: USB disconnect, device number 10 [ 310.731604][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 310.834482][ T29] audit: type=1326 audit(1740101895.541:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.1.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca9f8d0a9 code=0x7ffc0000 [ 310.856772][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.974253][ T29] audit: type=1326 audit(1740101895.541:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.1.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca9f8d0a9 code=0x7ffc0000 [ 311.077417][ T29] audit: type=1326 audit(1740101895.591:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.1.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f0ca9f8d0a9 code=0x7ffc0000 [ 311.184422][ T29] audit: type=1326 audit(1740101895.591:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.1.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca9f8d0a9 code=0x7ffc0000 [ 311.206724][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.316160][ T29] audit: type=1326 audit(1740101895.591:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.1.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca9f8d0a9 code=0x7ffc0000 [ 311.338553][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.626189][T11611] loop3: detected capacity change from 0 to 32768 [ 311.640547][T11611] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2398 (11611) [ 311.701414][T11611] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 311.728229][T11611] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 311.771352][T11611] BTRFS info (device loop3): disk space caching is enabled [ 311.778626][T11611] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 312.062398][T11611] BTRFS info (device loop3): rebuilding free space tree [ 312.124953][T11611] BTRFS info (device loop3): disabling free space tree [ 312.150843][T11611] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 312.186873][T11611] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 312.594971][ T5842] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 313.243690][T11692] Device name cannot be null; rc = [-22] [ 313.279649][T11689] loop2: detected capacity change from 0 to 512 [ 313.448783][T11689] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.473151][T11687] loop4: detected capacity change from 0 to 4096 [ 313.536163][T11689] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.560770][T11687] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 313.771803][ T5834] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 314.053052][T11713] loop2: detected capacity change from 0 to 164 [ 314.499719][T11725] netlink: 'syz.2.2446': attribute type 11 has an invalid length. [ 314.543057][T11728] loop4: detected capacity change from 0 to 64 [ 314.612943][T11731] loop3: detected capacity change from 0 to 64 [ 314.964493][T11743] openvswitch: netlink: IP tunnel dst address not specified [ 315.008307][T11745] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 315.712251][T11765] loop0: detected capacity change from 0 to 2048 [ 315.816472][T11765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.914475][T11765] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.998969][T11777] loop5: detected capacity change from 0 to 256 [ 316.006158][T11778] loop1: detected capacity change from 0 to 64 [ 316.080865][ T5843] EXT4-fs error (device loop0): ext4_readdir:259: inode #2: block 16: comm syz-executor: path /413/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 316.102183][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.259532][ T5843] ------------[ cut here ]------------ [ 316.265355][ T5843] bad length passed for symlink [/tmp/syz-imagegen1390833803/fil] (got 39, expected 32) [ 316.300782][ T5843] WARNING: CPU: 1 PID: 5843 at ./include/linux/fs.h:802 __ext4_iget+0x3aa2/0x4310 [ 316.320035][ T5843] Modules linked in: [ 316.324089][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 316.335177][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 316.345411][ T5843] RIP: 0010:__ext4_iget+0x3aa2/0x4310 [ 316.351137][ T5843] Code: e8 03 15 49 ff c6 05 9c 2b da 0d 01 90 8b 95 10 ff ff ff 44 89 e1 48 c7 c7 00 4c 85 8b 48 8b b5 f8 fe ff ff e8 2f 47 09 ff 90 <0f> 0b 90 90 e9 2d fd ff ff e8 f0 55 ab ff e9 f6 e6 ff ff e8 c6 54 [ 316.370968][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.377365][ T5843] RSP: 0018:ffffc90003017810 EFLAGS: 00010286 [ 316.383548][ T5843] RAX: 0000000000000000 RBX: ffff88805a8451fc RCX: ffffffff817a1229 [ 316.392272][ T5843] RDX: ffff88802c5ada00 RSI: ffffffff817a1236 RDI: 0000000000000001 [ 316.400918][ T5843] RBP: ffffc90003017960 R08: 0000000000000001 R09: 0000000000000000 [ 316.409010][ T5843] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000020 [ 316.415974][T11783] loop2: detected capacity change from 0 to 1764 [ 316.417126][ T5843] R13: 0000000000000000 R14: 0000000000002000 R15: ffff88805a8451f0 [ 316.431642][ T5843] FS: 0000555564d15500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 316.440780][ T5843] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 316.447403][ T5843] CR2: 00007f9a9fb44000 CR3: 0000000060588000 CR4: 0000000000350ef0 [ 316.455524][ T5843] Call Trace: [ 316.458830][ T5843] [ 316.461932][ T5843] ? __warn+0xea/0x3c0 [ 316.466060][ T5843] ? __ext4_iget+0x3aa2/0x4310 [ 316.470975][ T5843] ? report_bug+0x3c0/0x580 [ 316.475543][ T5843] ? handle_bug+0x54/0xa0 [ 316.479937][ T5843] ? exc_invalid_op+0x17/0x50 [ 316.484854][ T5843] ? asm_exc_invalid_op+0x1a/0x20 [ 316.489971][ T5843] ? __warn_printk+0x199/0x350 [ 316.495589][ T5843] ? __warn_printk+0x1a6/0x350 [ 316.500413][ T5843] ? __ext4_iget+0x3aa2/0x4310 [ 316.505936][ T5843] ? __pfx___ext4_iget+0x10/0x10 [ 316.511007][ T5843] ? __pfx_ext4_fname_prepare_lookup+0x10/0x10 [ 316.517237][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.523032][ T5843] ? kfree+0x260/0x4d0 [ 316.527192][ T5843] ext4_lookup+0x37e/0x730 [ 316.531763][ T5843] ? __pfx_ext4_lookup+0x10/0x10 [ 316.536820][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.542591][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.548319][ T5843] __lookup_slow+0x252/0x470 [ 316.553142][ T5843] ? __pfx___lookup_slow+0x10/0x10 [ 316.558334][ T5843] ? walk_component+0x342/0x5b0 [ 316.563462][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.569218][ T5843] ? lookup_fast+0x153/0x5f0 [ 316.574171][ T5843] walk_component+0x350/0x5b0 [ 316.578922][ T5843] path_lookupat+0x17f/0x770 [ 316.583692][ T5843] filename_lookup+0x221/0x5f0 [ 316.588575][ T5843] ? __pfx_filename_lookup+0x10/0x10 [ 316.594022][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.600359][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.606777][ T5843] ? getname_flags.part.0+0x1c5/0x550 [ 316.612306][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.618082][ T5843] user_path_at+0x3a/0x60 [ 316.622568][ T5843] __x64_sys_umount+0x10b/0x1a0 [ 316.627531][ T5843] ? __pfx___x64_sys_umount+0x10/0x10 [ 316.633088][ T5843] do_syscall_64+0xcd/0x250 [ 316.637697][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.643750][ T5843] RIP: 0033:0x7f3936f8e3d7 [ 316.648210][ T5843] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 316.667905][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.674100][ T5843] RSP: 002b:00007ffe864533d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 316.682648][ T5843] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3936f8e3d7 [ 316.690754][ T5843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe86453490 [ 316.699437][ T5843] RBP: 00007ffe86453490 R08: 0000000000000000 R09: 0000000000000000 [ 316.708313][ T5843] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe86454580 [ 316.717444][ T5843] R13: 00007f393700e08c R14: 000000000004d25a R15: 00007ffe86456740 [ 316.725723][ T5843] [ 316.728988][ T5843] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 316.736296][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 316.747188][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 316.757280][ T5843] Call Trace: [ 316.760580][ T5843] [ 316.763547][ T5843] dump_stack_lvl+0x3d/0x1f0 [ 316.768196][ T5843] panic+0x71d/0x800 [ 316.772145][ T5843] ? __pfx_panic+0x10/0x10 [ 316.776614][ T5843] ? show_trace_log_lvl+0x29d/0x3d0 [ 316.781891][ T5843] ? check_panic_on_warn+0x1f/0xb0 [ 316.787053][ T5843] ? __ext4_iget+0x3aa2/0x4310 [ 316.791950][ T5843] check_panic_on_warn+0xab/0xb0 [ 316.796923][ T5843] __warn+0xf6/0x3c0 [ 316.800857][ T5843] ? __ext4_iget+0x3aa2/0x4310 [ 316.805674][ T5843] report_bug+0x3c0/0x580 [ 316.810049][ T5843] handle_bug+0x54/0xa0 [ 316.814257][ T5843] exc_invalid_op+0x17/0x50 [ 316.818818][ T5843] asm_exc_invalid_op+0x1a/0x20 [ 316.823754][ T5843] RIP: 0010:__ext4_iget+0x3aa2/0x4310 [ 316.829182][ T5843] Code: e8 03 15 49 ff c6 05 9c 2b da 0d 01 90 8b 95 10 ff ff ff 44 89 e1 48 c7 c7 00 4c 85 8b 48 8b b5 f8 fe ff ff e8 2f 47 09 ff 90 <0f> 0b 90 90 e9 2d fd ff ff e8 f0 55 ab ff e9 f6 e6 ff ff e8 c6 54 [ 316.848837][ T5843] RSP: 0018:ffffc90003017810 EFLAGS: 00010286 [ 316.854948][ T5843] RAX: 0000000000000000 RBX: ffff88805a8451fc RCX: ffffffff817a1229 [ 316.862993][ T5843] RDX: ffff88802c5ada00 RSI: ffffffff817a1236 RDI: 0000000000000001 [ 316.870998][ T5843] RBP: ffffc90003017960 R08: 0000000000000001 R09: 0000000000000000 [ 316.878998][ T5843] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000020 [ 316.887019][ T5843] R13: 0000000000000000 R14: 0000000000002000 R15: ffff88805a8451f0 [ 316.895026][ T5843] ? __warn_printk+0x199/0x350 [ 316.899832][ T5843] ? __warn_printk+0x1a6/0x350 [ 316.904654][ T5843] ? __pfx___ext4_iget+0x10/0x10 [ 316.909630][ T5843] ? __pfx_ext4_fname_prepare_lookup+0x10/0x10 [ 316.915838][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.921614][ T5843] ? kfree+0x260/0x4d0 [ 316.925734][ T5843] ext4_lookup+0x37e/0x730 [ 316.930243][ T5843] ? __pfx_ext4_lookup+0x10/0x10 [ 316.935241][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.940934][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.946621][ T5843] __lookup_slow+0x252/0x470 [ 316.951337][ T5843] ? __pfx___lookup_slow+0x10/0x10 [ 316.956490][ T5843] ? walk_component+0x342/0x5b0 [ 316.961389][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.967071][ T5843] ? lookup_fast+0x153/0x5f0 [ 316.971706][ T5843] walk_component+0x350/0x5b0 [ 316.976425][ T5843] path_lookupat+0x17f/0x770 [ 316.981068][ T5843] filename_lookup+0x221/0x5f0 [ 316.985891][ T5843] ? __pfx_filename_lookup+0x10/0x10 [ 316.991223][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 316.996940][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.002626][ T5843] ? getname_flags.part.0+0x1c5/0x550 [ 317.008036][ T5843] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.013742][ T5843] user_path_at+0x3a/0x60 [ 317.018144][ T5843] __x64_sys_umount+0x10b/0x1a0 [ 317.023045][ T5843] ? __pfx___x64_sys_umount+0x10/0x10 [ 317.028487][ T5843] do_syscall_64+0xcd/0x250 [ 317.033097][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.039060][ T5843] RIP: 0033:0x7f3936f8e3d7 [ 317.043503][ T5843] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 317.063146][ T5843] RSP: 002b:00007ffe864533d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 317.071592][ T5843] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3936f8e3d7 [ 317.079629][ T5843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe86453490 [ 317.087622][ T5843] RBP: 00007ffe86453490 R08: 0000000000000000 R09: 0000000000000000 [ 317.095626][ T5843] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe86454580 [ 317.103620][ T5843] R13: 00007f393700e08c R14: 000000000004d25a R15: 00007ffe86456740 [ 317.111637][ T5843] [ 317.114884][ T5843] Kernel Offset: disabled [ 317.119284][ T5843] Rebooting in 86400 seconds..