last executing test programs: 11.160746594s ago: executing program 1 (id=2992): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x10000, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd28, 0x3502}]}, 0x50}}, 0x0) 11.061940476s ago: executing program 1 (id=2993): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x1c) 10.964583958s ago: executing program 1 (id=2994): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008aec1, &(0x7f0000000080)) 10.724085332s ago: executing program 1 (id=2996): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 10.30883482s ago: executing program 1 (id=2999): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f00000003c0)={0xdf, 0x1, &(0x7f0000000240)=[0x0], &(0x7f0000000300), 0x0, 0x0}) 9.884156179s ago: executing program 1 (id=3005): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0x11, 0x1, 0x0, 0x9, 0x0}) 9.499980616s ago: executing program 32 (id=3005): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0x11, 0x1, 0x0, 0x9, 0x0}) 4.240150698s ago: executing program 0 (id=3063): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @local}, 0x10) 3.024810931s ago: executing program 3 (id=3071): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0xfffffffffffffffe}}]}}}]}, 0x40}}, 0x0) 1.323287775s ago: executing program 0 (id=3080): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) 1.295581065s ago: executing program 2 (id=3081): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x220, 0x220, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@local, @dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0xff000000, 0x2, 0x10, {@mac=@local, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x3, 0x6, 0x7, 0x2, 0xffad, 0xff45, 'team0\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x3c5}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@broadcast, @rand_addr, @local, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @mangle={0x0, 'mangle\x00', 0x0, {@mac=@random="7ba0376ec4d2", @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}, {{@arp={@remote, @private=0x4003, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0xff]}}, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="0100", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x48a) 1.289249995s ago: executing program 3 (id=3088): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xfeffff7f, 0x8, 0x8}}]}]}]}, 0x54}}, 0x0) 1.169569198s ago: executing program 2 (id=3082): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.076255859s ago: executing program 0 (id=3083): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xf, 0x0, &(0x7f0000000440)="e0274206000400ff9782062f86ddf1", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 904.156643ms ago: executing program 0 (id=3084): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x23f58e5b666a3f02) 876.450843ms ago: executing program 3 (id=3085): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xd1, 0x0, 0x0) 741.871166ms ago: executing program 2 (id=3086): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="16000000246837f7", 0x8}], 0x1) 620.110828ms ago: executing program 3 (id=3087): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a000100000000004000000081000000000000000000000008000f00fe0010"], 0x24}}, 0x0) 593.193329ms ago: executing program 0 (id=3089): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r0, &(0x7f0000000180)=""/173, 0xad, 0x1b, &(0x7f0000000240)) 515.44637ms ago: executing program 2 (id=3090): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/oops_count', 0x101000, 0x16a) finit_module(r0, 0x0, 0x2) 321.761824ms ago: executing program 0 (id=3091): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)={[{@eas_no}, {@eas_no}, {@case_asis}, {@check_none}]}, 0x1, 0x9e18, &(0x7f000000a040)="$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") symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 308.906704ms ago: executing program 3 (id=3092): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x5, 0x4) 273.553845ms ago: executing program 2 (id=3093): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000003c0)={0x28, 0x266101153ab46062, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) 113.308868ms ago: executing program 3 (id=3094): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r0, r0, 0x0, 0xc3) 0s ago: executing program 2 (id=3095): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000700)={0x233, 0x7d, 0x0, {{0x500, 0xf2, 0x500, 0x5000000, {}, 0x56080000, 0x0, 0x0, 0x0, 0x20, 'vfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00Y\x15j\\\xe0\x99\xac\x81\xe0', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3\xff\xff\xff\xff\xff\xff\xff\xf8\xb4\xf1t\xa6f\xa8R\xb9\xd1biG8cW\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00H\x05!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff}}, 0x233) kernel console output (not intermixed with test programs): [ T8597] loop0: detected capacity change from 0 to 32768 [ 184.629219][ T8631] mmap: syz.2.1232 (8631): VmData 37466112 exceed data ulimit 10. Update limits or use boot option ignore_rlimit_data. [ 184.649867][ T8623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.707741][ T8623] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.809048][ T8623] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1230: corrupted xattr block 19: overlapping e_value [ 184.867633][ T8623] EXT4-fs (loop3): Remounting filesystem read-only [ 185.013060][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.141931][ T787] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 185.383781][ T787] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 185.401137][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 185.441507][ T787] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 185.481982][ T787] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 185.490241][ T787] usb 3-1: Product: syz [ 185.535127][ T787] usb 3-1: Manufacturer: syz [ 185.539900][ T787] usb 3-1: SerialNumber: syz [ 185.568393][ T787] usb 3-1: config 0 descriptor?? [ 185.599212][ T787] usb 3-1: selecting invalid altsetting 0 [ 185.832970][ T5833] usb 3-1: USB disconnect, device number 6 [ 186.027301][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1252'. [ 186.355278][ T8681] netlink: 'syz.0.1257': attribute type 10 has an invalid length. [ 186.385291][ T8681] syz_tun: entered promiscuous mode [ 186.464993][ T8681] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 186.550560][ T8687] loop3: detected capacity change from 0 to 764 [ 187.045261][ T8703] loop3: detected capacity change from 0 to 1764 [ 187.107070][ T5788] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.147402][ T8703] syz.3.1268: attempt to access beyond end of device [ 187.147402][ T8703] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 187.193648][ T8703] syz.3.1268: attempt to access beyond end of device [ 187.193648][ T8703] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 187.251159][ T8703] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 187.273657][ T8703] syz.3.1268: attempt to access beyond end of device [ 187.273657][ T8703] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 187.327057][ T8703] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 187.370760][ T8703] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 187.403480][ T8703] UDF-fs: Scanning with blocksize 512 failed [ 187.413176][ T8714] loop1: detected capacity change from 0 to 8 [ 187.445568][ T8703] syz.3.1268: attempt to access beyond end of device [ 187.445568][ T8703] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 187.485650][ T8714] SQUASHFS error: Failed to read block 0x1ec: -5 [ 187.498636][ T8703] syz.3.1268: attempt to access beyond end of device [ 187.498636][ T8703] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 187.522445][ T8714] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 187.555542][ T8703] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 187.584734][ T8703] syz.3.1268: attempt to access beyond end of device [ 187.584734][ T8703] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 187.654648][ T8703] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 187.708701][ T8703] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 187.727638][ T8703] UDF-fs: Scanning with blocksize 1024 failed [ 187.742774][ T8703] syz.3.1268: attempt to access beyond end of device [ 187.742774][ T8703] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 187.772791][ T8703] syz.3.1268: attempt to access beyond end of device [ 187.772791][ T8703] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 187.821541][ T8703] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 187.861872][ T8703] syz.3.1268: attempt to access beyond end of device [ 187.861872][ T8703] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 187.903096][ T8703] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 187.916361][ T8726] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 187.936042][ T8703] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 187.947126][ T8703] UDF-fs: Scanning with blocksize 2048 failed [ 187.963963][ T8703] syz.3.1268: attempt to access beyond end of device [ 187.963963][ T8703] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 188.021310][ T8703] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 188.045377][ T8703] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 188.076838][ T8703] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 188.096544][ T8703] UDF-fs: Scanning with blocksize 4096 failed [ 188.106704][ T8734] loop0: detected capacity change from 0 to 8 [ 188.115698][ T8703] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 188.213213][ T8736] netlink: 'syz.1.1284': attribute type 6 has an invalid length. [ 188.251602][ T8736] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1284'. [ 188.381686][ T8740] netlink: 'syz.3.1286': attribute type 10 has an invalid length. [ 188.389578][ T8740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1286'. [ 188.419409][ T8740] bridge0: port 3(dummy0) entered blocking state [ 188.439130][ T8740] bridge0: port 3(dummy0) entered disabled state [ 188.452943][ T8740] dummy0: entered allmulticast mode [ 188.459939][ T8740] dummy0: entered promiscuous mode [ 188.469818][ T8740] bridge0: port 3(dummy0) entered blocking state [ 188.476435][ T8740] bridge0: port 3(dummy0) entered forwarding state [ 188.942492][ T8755] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1292'. [ 189.043731][ T8738] loop2: detected capacity change from 0 to 32768 [ 189.279085][ T8763] loop1: detected capacity change from 0 to 164 [ 189.376787][ T8763] isofs: Unable to find the ".." directory for NFS. [ 189.620133][ T8775] loop3: detected capacity change from 0 to 8 [ 190.029233][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1309'. [ 190.062318][ T8786] netlink: 'syz.0.1309': attribute type 1 has an invalid length. [ 190.090367][ T8786] netlink: 'syz.0.1309': attribute type 2 has an invalid length. [ 190.118257][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1309'. [ 190.794723][ T8816] loop1: detected capacity change from 0 to 128 [ 190.837555][ T8816] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.863932][ T8816] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.902820][ T8816] EXT4-fs (loop1): Test dummy encryption mode enabled [ 190.949342][ T8816] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.051537][ T8816] ext4 filesystem being mounted at /352/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.144696][ T8830] loop0: detected capacity change from 0 to 128 [ 191.199736][ T5782] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.212723][ T8830] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.254632][ T8830] ext4 filesystem being mounted at /312/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.296716][ T8830] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 49 (only 1 groups) [ 191.451563][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.024389][ T8861] loop1: detected capacity change from 0 to 512 [ 192.076127][ T8861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.095960][ T8861] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.245265][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.273236][ T5773] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 192.391414][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 192.483752][ T5773] usb 4-1: Using ep0 maxpacket: 32 [ 192.498081][ T5773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 192.514672][ T5773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 192.542671][ T5773] usb 4-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 192.561464][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.570990][ T5773] usb 4-1: Product: syz [ 192.575251][ T5773] usb 4-1: Manufacturer: syz [ 192.598894][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 192.613851][ T5773] usb 4-1: SerialNumber: syz [ 192.629885][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.640636][ T5773] usb 4-1: config 0 descriptor?? [ 192.659579][ T9] usb 1-1: Product: syz [ 192.671439][ T9] usb 1-1: Manufacturer: syz [ 192.676137][ T9] usb 1-1: SerialNumber: syz [ 192.924252][ T5773] usb 4-1: USB disconnect, device number 6 [ 192.961343][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 193.022602][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 193.040709][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 193.057811][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 193.072639][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 193.097072][ T9] lan78xx: probe of 1-1:1.0 failed with error -71 [ 193.117003][ T9] usb 1-1: USB disconnect, device number 9 [ 193.632918][ T8893] loop1: detected capacity change from 0 to 40427 [ 193.657334][ T8893] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 193.679351][ T8893] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 193.710044][ T8893] F2FS-fs (loop1): heap/no_heap options were deprecated [ 193.748858][ T8893] F2FS-fs (loop1): invalid crc value [ 193.754421][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 193.801697][ T8893] F2FS-fs (loop1): Found nat_bits in checkpoint [ 193.831953][ T28] audit: type=1326 audit(1757621016.701:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf8eba9 code=0x7ffc0000 [ 193.901425][ T28] audit: type=1326 audit(1757621016.701:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf8eba9 code=0x7ffc0000 [ 193.960998][ T28] audit: type=1326 audit(1757621016.711:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fa34cf8eba9 code=0x7ffc0000 [ 193.983858][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 194.005898][ T8893] F2FS-fs (loop1): Start checkpoint disabled! [ 194.025119][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 194.034313][ T28] audit: type=1326 audit(1757621016.711:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf8eba9 code=0x7ffc0000 [ 194.035004][ T8893] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 194.062683][ T9] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 194.073886][ T9] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 194.084497][ T28] audit: type=1326 audit(1757621016.711:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf8eba9 code=0x7ffc0000 [ 194.107337][ T9] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 194.121344][ T9] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 194.131464][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 194.138191][ T9] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 194.148089][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.151100][ T8893] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 194.190449][ T9] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 194.259453][ T8893] F2FS-fs (loop1): disabling checkpoint not compatible with read-only [ 194.400108][ T9] scsi host1: usb-storage 3-1:1.0 [ 194.613962][ T5833] usb 3-1: USB disconnect, device number 7 [ 194.658339][ T28] audit: type=1326 audit(1757621017.521:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.1.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd5f8eba9 code=0x7ffc0000 [ 194.686640][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.693192][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.718751][ T28] audit: type=1326 audit(1757621017.521:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.1.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd5f8eba9 code=0x7ffc0000 [ 194.758259][ T28] audit: type=1326 audit(1757621017.571:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.1.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f0cd5f8eba9 code=0x7ffc0000 [ 194.816220][ T28] audit: type=1326 audit(1757621017.571:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.1.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd5f8eba9 code=0x7ffc0000 [ 194.840750][ T28] audit: type=1326 audit(1757621017.571:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8935 comm="syz.1.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd5f8eba9 code=0x7ffc0000 [ 194.871104][ T8940] netlink: 'syz.0.1378': attribute type 2 has an invalid length. [ 195.115522][ T8948] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1382'. [ 195.172344][ T8948] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1382'. [ 195.397008][ T8954] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 195.457387][ T8960] overlay: ./file0 is not a directory [ 196.232546][ T8991] kAFS: unable to lookup cell '/,' [ 196.436018][ T9000] loop1: detected capacity change from 0 to 64 [ 196.527568][ T9002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1409'. [ 197.111052][ T9016] syz.3.1416 (9016): /proc/9015/oom_adj is deprecated, please use /proc/9015/oom_score_adj instead. [ 197.295916][ T9022] netlink: 'syz.2.1420': attribute type 21 has an invalid length. [ 197.341628][ T8996] loop0: detected capacity change from 0 to 32768 [ 197.413590][ T8996] [ 197.413590][ T8996] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.413590][ T8996] [ 197.487341][ T8996] jfs_lookup: dtSearch returned -5 [ 197.651093][ T5781] [ 197.651093][ T5781] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.651093][ T5781] [ 197.683646][ T5781] [ 197.683646][ T5781] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 197.683646][ T5781] [ 197.713586][ T9030] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0) [ 197.932840][ T9036] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1426'. [ 197.962220][ T9036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.372266][ T9026] loop3: detected capacity change from 0 to 32768 [ 198.414388][ T9026] (syz.3.1421,9026,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 198.465848][ T9026] (syz.3.1421,9026,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 198.580481][ T9026] JBD2: Ignoring recovery information on journal [ 198.793916][ T9026] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 199.077383][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 199.296900][ T9046] loop1: detected capacity change from 0 to 32768 [ 199.364479][ T9046] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.626665][ T9046] XFS (loop1): Ending clean mount [ 199.676086][ T9046] XFS (loop1): Quotacheck needed: Please wait. [ 199.846003][ T9046] XFS (loop1): Quotacheck: Done. [ 199.940647][ T9091] netlink: 'syz.3.1446': attribute type 5 has an invalid length. [ 199.999463][ T5782] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.999515][ T9091] ip6erspan0: entered promiscuous mode [ 200.449540][ T9101] loop2: detected capacity change from 0 to 4096 [ 200.539077][ T9101] ntfs: volume version 3.1. [ 201.189654][ T9127] loop3: detected capacity change from 0 to 1024 [ 201.224135][ T9127] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 201.291562][ T9127] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.1464: Invalid block bitmap block 0 in block_group 0 [ 201.397771][ T9127] Quota error (device loop3): write_blk: dquota write failed [ 201.441180][ T9127] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 201.471159][ T9127] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.1464: Failed to acquire dquot type 0 [ 201.501363][ T5833] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 201.513771][ T9127] EXT4-fs error (device loop3): ext4_free_blocks:6676: comm syz.3.1464: Freeing blocks not in datazone - block = 0, count = 4096 [ 201.541380][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'. [ 201.565729][ T9127] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1464: Invalid inode bitmap blk 0 in block_group 0 [ 201.595586][ T9127] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 201.606169][ T48] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 201.644355][ T9127] EXT4-fs (loop3): 1 orphan inode deleted [ 201.646672][ T48] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:3: Failed to release dquot type 0 [ 201.664584][ T9127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.710994][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 201.718815][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 201.749285][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 201.774008][ T5833] usb 3-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 201.797241][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.807990][ T9127] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.1464: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 201.815942][ T5833] usb 3-1: Product: syz [ 201.864424][ T5833] usb 3-1: Manufacturer: syz [ 201.889282][ T5833] usb 3-1: SerialNumber: syz [ 201.912510][ T5833] usb 3-1: config 0 descriptor?? [ 201.982893][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.150527][ T9155] loop0: detected capacity change from 0 to 256 [ 202.187448][ T5833] usb 3-1: USB disconnect, device number 8 [ 202.193537][ T9155] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.221059][ T9155] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 202.262578][ T9155] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 202.359076][ T9162] loop3: detected capacity change from 0 to 128 [ 202.417833][ T9162] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.542842][ T9162] ext4 filesystem being mounted at /353/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.610338][ T9162] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 49 (only 1 groups) [ 202.724273][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.031624][ T787] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 203.231098][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 203.242608][ T787] usb 1-1: unable to get BOS descriptor or descriptor too short [ 203.252440][ T787] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 203.274224][ T787] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 203.300941][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.311546][ T787] usb 1-1: Product: syz [ 203.315769][ T787] usb 1-1: Manufacturer: syz [ 203.320411][ T787] usb 1-1: SerialNumber: syz [ 203.348190][ T9194] netlink: 'syz.3.1497': attribute type 3 has an invalid length. [ 203.358992][ T9194] netlink: 46 bytes leftover after parsing attributes in process `syz.3.1497'. [ 203.525766][ T28] audit: type=1326 audit(1757621026.381:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf8eba9 code=0x7ffc0000 [ 203.580976][ T28] audit: type=1326 audit(1757621026.381:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf8eba9 code=0x7ffc0000 [ 203.624423][ T787] usb 1-1: Invalid number of CPorts: 0 [ 203.634427][ T787] es2_ap_driver: probe of 1-1:7.0 failed with error -22 [ 203.659141][ T28] audit: type=1326 audit(1757621026.401:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fa34cf8eba9 code=0x7ffc0000 [ 203.734647][ T28] audit: type=1326 audit(1757621026.401:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf8eba9 code=0x7ffc0000 [ 203.781228][ T28] audit: type=1326 audit(1757621026.401:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf8eba9 code=0x7ffc0000 [ 203.863726][ T5840] usb 1-1: USB disconnect, device number 10 [ 204.556653][ T9225] loop2: detected capacity change from 0 to 4096 [ 204.601146][ T9225] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 204.741036][ T9225] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 204.787027][ T9225] ntfs3: loop2: mft corrupted [ 204.797190][ T9225] ntfs3: loop2: Failed to load $Extend (-22). [ 204.830786][ T9225] ntfs3: loop2: Failed to initialize $Extend. [ 204.911450][ T28] audit: type=1326 audit(1757621027.761:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.0.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3685f8eba9 code=0x7ffc0000 [ 204.933656][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.000030][ T28] audit: type=1326 audit(1757621027.761:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.0.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3685f8eba9 code=0x7ffc0000 [ 205.186740][ T9241] netlink: 'syz.0.1517': attribute type 9 has an invalid length. [ 205.242392][ T9241] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1517'. [ 206.240684][ T9276] loop2: detected capacity change from 0 to 512 [ 206.332563][ T9276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.441879][ T9285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1535'. [ 206.442427][ T9276] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.563196][ T9276] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1533: corrupted xattr block 19: overlapping e_value [ 206.654766][ T9276] EXT4-fs (loop2): Remounting filesystem read-only [ 206.786349][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.959434][ T9339] loop1: detected capacity change from 0 to 1764 [ 208.021116][ T9339] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 208.241802][ T9347] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1564'. [ 208.735180][ T9370] loop2: detected capacity change from 0 to 512 [ 208.781339][ T9370] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1577: bad orphan inode 15 [ 208.866856][ T9370] ext4_test_bit(bit=14, block=5) = 0 [ 208.913689][ T9370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.995124][ T9370] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 209.057081][ T9370] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.1577: bit already cleared for inode 13 [ 209.205081][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.269261][ T9383] loop1: detected capacity change from 0 to 4096 [ 209.316088][ T9383] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 209.325558][ T9389] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1585'. [ 209.447305][ T9383] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 209.473209][ T9383] ntfs3: loop1: mft corrupted [ 209.497989][ T9383] ntfs3: loop1: Failed to load $Extend (-22). [ 209.511590][ T9383] ntfs3: loop1: Failed to initialize $Extend. [ 209.757538][ T9401] Unsupported ieee802154 address type: 0 [ 209.946337][ T9407] tmpfs: Bad value for 'mpol' [ 210.128654][ T9411] netlink: 'syz.3.1595': attribute type 6 has an invalid length. [ 210.136811][ T9411] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1595'. [ 210.397985][ T9419] loop3: detected capacity change from 0 to 2048 [ 210.446020][ T9419] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051 [ 210.506323][ T9419] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.516636][ T9423] loop2: detected capacity change from 0 to 8 [ 211.258012][ T9435] ipt_REJECT: TCP_RESET invalid for non-tcp [ 211.288811][ T9433] loop2: detected capacity change from 0 to 4096 [ 211.291334][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 211.360186][ T9433] ntfs3: loop2: ino=5, "/" directory corrupted [ 211.514979][ T9441] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1617'. [ 211.525368][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 211.562117][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 211.568054][ T9441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1617'. [ 211.592177][ T9] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 211.616535][ T9] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 211.619035][ T9441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1617'. [ 211.639057][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.658308][ T9441] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1617'. [ 211.663578][ T9] usb 4-1: Product: syz [ 211.684387][ T9] usb 4-1: Manufacturer: syz [ 211.720445][ T9] usb 4-1: SerialNumber: syz [ 211.884209][ T9450] loop0: detected capacity change from 0 to 164 [ 211.951080][ T9450] Unsupported NM flag settings (8) [ 211.994624][ T9] usb 4-1: Invalid number of CPorts: 0 [ 212.000184][ T9] es2_ap_driver: probe of 4-1:7.0 failed with error -22 [ 212.085752][ T9453] loop1: detected capacity change from 0 to 2048 [ 212.111239][ T9453] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 212.142357][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 212.148500][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 212.154787][ T5099] Bluetooth: hci2: command 0x0406 tx timeout [ 212.157726][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 212.238213][ T27] usb 4-1: USB disconnect, device number 7 [ 212.246071][ T9458] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.338137][ T9460] loop2: detected capacity change from 0 to 64 [ 212.951540][ T9475] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1628'. [ 213.054535][ T9478] netlink: 'syz.0.1636': attribute type 63 has an invalid length. [ 213.090486][ T9478] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1636'. [ 213.273054][ T9484] netlink: 'syz.0.1632': attribute type 3 has an invalid length. [ 213.402035][ T9464] loop2: detected capacity change from 0 to 32768 [ 213.482622][ T9464] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.741527][ T9464] XFS (loop2): Ending clean mount [ 213.767922][ T9464] XFS (loop2): Quotacheck needed: Please wait. [ 213.782684][ T9509] loop3: detected capacity change from 0 to 8 [ 213.884778][ T9464] XFS (loop2): Quotacheck: Done. [ 213.970754][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 214.063792][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 214.249017][ T9519] loop0: detected capacity change from 0 to 512 [ 214.261158][ T9516] loop1: detected capacity change from 0 to 1764 [ 214.275710][ T9520] loop3: detected capacity change from 0 to 128 [ 214.322762][ T9519] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1647: bad orphan inode 15 [ 214.344599][ T9520] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 214.354774][ T9516] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 214.396516][ T9519] ext4_test_bit(bit=14, block=5) = 0 [ 214.403506][ T9519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.415600][ T9516] UDF-fs: Scanning with blocksize 512 failed [ 214.424269][ T9516] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 214.451820][ T9516] UDF-fs: Scanning with blocksize 1024 failed [ 214.483306][ T9516] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 214.484225][ T9520] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.490792][ T9516] UDF-fs: Scanning with blocksize 2048 failed [ 214.547370][ T9519] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 214.601518][ T9519] EXT4-fs error (device loop0): ext4_free_inode:356: comm syz.0.1647: bit already cleared for inode 13 [ 214.621539][ T9516] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 214.637532][ T9516] UDF-fs: Scanning with blocksize 4096 failed [ 214.713235][ T9524] tmpfs: Bad value for 'mpol' [ 214.738332][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.155723][ T9536] loop1: detected capacity change from 0 to 8 [ 215.491138][ T9548] loop2: detected capacity change from 0 to 64 [ 215.638209][ T9550] tmpfs: Bad value for 'mpol' [ 216.173173][ T9538] loop0: detected capacity change from 0 to 32768 [ 216.210567][ T9538] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 216.484366][ T9538] XFS (loop0): Ending clean mount [ 216.522398][ T9538] XFS (loop0): Quotacheck needed: Please wait. [ 216.641403][ T9538] XFS (loop0): Quotacheck: Done. [ 216.775313][ T9562] loop3: detected capacity change from 0 to 32768 [ 216.811249][ T5824] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 216.860778][ T5781] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 216.872661][ T9562] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 217.041722][ T5824] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 217.050848][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.061355][ T9586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1674'. [ 217.093119][ T5824] usb 3-1: config 0 descriptor?? [ 217.133584][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 217.370212][ T5824] snd-usb-hiface: probe of 3-1:0.0 failed with error -22 [ 217.596080][ T27] usb 3-1: USB disconnect, device number 9 [ 218.143423][ T9590] loop1: detected capacity change from 0 to 32768 [ 218.193416][ T9590] (syz.1.1675,9590,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 218.237976][ T9590] (syz.1.1675,9590,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 218.365066][ T9590] JBD2: Ignoring recovery information on journal [ 218.555874][ T9590] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 218.758881][ T5782] ocfs2: Unmounting device (7,1) on (node local) [ 218.818434][ T27] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 218.862040][ T9627] --map-set only usable from mangle table [ 218.952740][ T9629] loop3: detected capacity change from 0 to 16 [ 218.982993][ T9629] erofs: (device loop3): mounted with root inode @ nid 36. [ 219.052761][ T27] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 219.081019][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 219.105138][ T27] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 219.119915][ T27] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 219.130669][ T27] usb 1-1: Product: syz [ 219.135282][ T27] usb 1-1: Manufacturer: syz [ 219.139953][ T27] usb 1-1: SerialNumber: syz [ 219.183049][ T27] usb 1-1: config 0 descriptor?? [ 219.197558][ T27] usb 1-1: selecting invalid altsetting 0 [ 219.547502][ T27] usb 1-1: USB disconnect, device number 11 [ 220.236289][ T9639] loop2: detected capacity change from 0 to 32768 [ 220.261197][ T9658] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1707'. [ 220.301952][ T9658] 0·: renamed from hsr0 (while UP) [ 220.348797][ T9658] 0·: entered allmulticast mode [ 220.372993][ T9658] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 221.702715][ T9705] xt_hashlimit: max too large, truncated to 1048576 [ 221.836801][ T9712] netlink: 'syz.2.1733': attribute type 2 has an invalid length. [ 222.305442][ T9728] IPv6: sit1: Disabled Multicast RS [ 222.671847][ T9740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1747'. [ 222.704854][ T9742] ieee802154 phy0 wpan0: encryption failed: -90 [ 223.781012][ T9782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1768'. [ 224.082588][ T9792] xt_cgroup: invalid path, errno=-2 [ 224.152713][ T9796] IPv6: sit1: Disabled Multicast RS [ 224.191110][ T5840] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 224.403434][ T5840] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 224.419050][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.421493][ T9806] Cannot find add_set index 4 as target [ 224.440349][ T5840] usb 4-1: config 0 descriptor?? [ 224.516594][ T9808] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 224.540222][ T9808] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 224.608950][ T9810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1782'. [ 224.679367][ T5840] snd-usb-hiface: probe of 4-1:0.0 failed with error -22 [ 224.900296][ T787] usb 4-1: USB disconnect, device number 8 [ 225.089006][ T9822] loop2: detected capacity change from 0 to 2048 [ 225.114230][ T9822] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.195848][ T9804] loop0: detected capacity change from 0 to 32768 [ 225.223137][ T9804] jfs_lookup: iget failed on inum 32 [ 225.230800][ T9804] jfs_lookup: iget failed on inum 32 [ 225.236429][ T5824] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 225.364006][ T9824] IPVS: set_ctl: invalid protocol: 41 172.30.0.3:65534 [ 225.445863][ T5824] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.469288][ T5824] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.518610][ T5824] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.558578][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.585538][ T5824] usb 2-1: Product: syz [ 225.605518][ T5824] usb 2-1: Manufacturer: syz [ 225.630127][ T5824] usb 2-1: SerialNumber: syz [ 225.641423][ T5824] cdc_ncm 2-1:1.0: skipping garbage [ 225.662280][ T5824] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 225.680260][ T5824] cdc_ncm 2-1:1.0: bind() failure [ 225.695235][ T5824] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 225.728751][ T5824] cdc_ncm 2-1:1.1: bind() failure [ 225.930713][ T5824] usb 2-1: USB disconnect, device number 4 [ 226.010709][ T9841] loop0: detected capacity change from 0 to 16 [ 226.032445][ T9841] erofs: (device loop0): mounted with root inode @ nid 36. [ 226.100644][ T9843] netlink: 'syz.2.1798': attribute type 7 has an invalid length. [ 226.758833][ T9866] loop2: detected capacity change from 0 to 2048 [ 226.805162][ T9866] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.876161][ T9871] netlink: 'syz.1.1812': attribute type 11 has an invalid length. [ 226.903456][ T9871] netlink: 440 bytes leftover after parsing attributes in process `syz.1.1812'. [ 227.051671][ T9875] loop3: detected capacity change from 0 to 164 [ 227.147270][ T9875] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 227.199723][ T9881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1817'. [ 227.603124][ T9893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1822'. [ 227.835161][ T9903] binder: BC_ATTEMPT_ACQUIRE not supported [ 227.847972][ T9903] binder: 9902:9903 ioctl c0306201 2000000003c0 returned -22 [ 228.246956][ T9916] netlink: 'syz.0.1834': attribute type 2 has an invalid length. [ 228.479827][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1840'. [ 228.499672][ T9925] openvswitch: netlink: Message has 8 unknown bytes. [ 228.686995][ T9934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1843'. [ 228.716569][ T9934] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1843'. [ 229.149436][ T9947] netlink: 'syz.3.1850': attribute type 10 has an invalid length. [ 229.176418][ T9947] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1850'. [ 229.260321][ T9952] delete_channel: no stack [ 229.412561][ T9955] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 229.671438][ T9965] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 229.678946][ T9965] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 229.721899][ T9965] Error parsing options; rc = [-22] [ 229.801662][ T9968] loop2: detected capacity change from 0 to 4096 [ 229.831327][ T9968] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 230.118711][ T9979] loop0: detected capacity change from 0 to 1764 [ 230.229685][ T9979] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 231.107581][T10015] loop1: detected capacity change from 0 to 256 [ 231.175555][T10015] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 231.453005][T10023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1888'. [ 231.836178][T10011] loop3: detected capacity change from 0 to 32768 [ 231.893857][T10011] (syz.3.1882,10011,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 231.956859][T10011] (syz.3.1882,10011,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.047776][T10011] JBD2: Ignoring recovery information on journal [ 232.172479][T10011] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 232.193084][T10045] tmpfs: Bad value for 'mpol' [ 232.382663][T10050] loop1: detected capacity change from 0 to 256 [ 232.474513][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 232.874184][T10059] : entered promiscuous mode [ 233.328507][T10079] SET target dimension over the limit! [ 233.722808][ T5795] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1 [ 233.724074][ T5795] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 233.936795][T10099] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 233.950628][T10099] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 234.456375][T10109] loop3: detected capacity change from 0 to 4096 [ 234.471202][T10109] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 234.514557][T10109] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 234.621654][T10109] ntfs3: loop3: failed to convert "c46c" to macceltic [ 234.845988][T10115] loop3: detected capacity change from 0 to 256 [ 234.967510][T10115] FAT-fs (loop3): Directory bread(block 64) failed [ 234.991142][T10115] FAT-fs (loop3): Directory bread(block 65) failed [ 235.020822][T10115] FAT-fs (loop3): Directory bread(block 66) failed [ 235.027578][T10115] FAT-fs (loop3): Directory bread(block 67) failed [ 235.054768][T10115] FAT-fs (loop3): Directory bread(block 68) failed [ 235.072875][T10115] FAT-fs (loop3): Directory bread(block 69) failed [ 235.102359][T10115] FAT-fs (loop3): Directory bread(block 70) failed [ 235.108966][T10115] FAT-fs (loop3): Directory bread(block 71) failed [ 235.134410][T10115] FAT-fs (loop3): Directory bread(block 72) failed [ 235.176373][T10115] FAT-fs (loop3): Directory bread(block 73) failed [ 235.302459][ T5824] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 235.812580][ T5773] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 235.878334][T10147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1949'. [ 236.205843][ T58] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 236.589650][T10168] loop3: detected capacity change from 0 to 1024 [ 236.608668][T10169] loop0: detected capacity change from 0 to 1024 [ 236.617066][T10168] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.643569][T10141] loop2: detected capacity change from 0 to 32768 [ 236.653149][T10168] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 236.674874][T10168] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 236.751271][T10141] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 236.783191][T10168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.819470][ T163] hfsplus: b-tree write err: -5, ino 4 [ 236.825370][T10171] loop1: detected capacity change from 0 to 4096 [ 236.881496][T10171] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 236.940484][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.999439][T10141] XFS (loop2): Ending clean mount [ 237.011454][T10171] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 237.092749][T10141] XFS (loop2): Quotacheck needed: Please wait. [ 237.217379][T10171] ntfs3: loop1: failed to convert "c46c" to macceltic [ 237.237958][T10141] XFS (loop2): Quotacheck: Done. [ 237.256166][ T5867] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 237.281308][ T5867] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 237.326411][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 237.394119][ T5786] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 237.581753][ T27] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 237.803664][ T5798] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 237.825418][ T5798] Bluetooth: hci2: Injecting HCI hardware error event [ 237.835541][ T5795] Bluetooth: hci2: hardware error 0x00 [ 237.921565][T10201] SET target dimension over the limit! [ 237.980526][T10203] loop3: detected capacity change from 0 to 64 [ 238.264203][T10213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1975'. [ 238.290970][T10213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1975'. [ 238.741339][T10231] x_tables: duplicate underflow at hook 1 [ 238.935834][T10237] program syz.2.1988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.238837][T10251] loop3: detected capacity change from 0 to 256 [ 239.519658][T10257] netlink: 'syz.2.1998': attribute type 1 has an invalid length. [ 239.538128][T10257] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1998'. [ 239.889025][ T5795] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 239.918136][T10250] loop1: detected capacity change from 0 to 32768 [ 239.983863][T10250] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 240.023975][ T42] (kworker/u4:2,42,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 240.140994][T10255] loop3: detected capacity change from 0 to 32768 [ 240.366879][ T5782] ocfs2: Unmounting device (7,1) on (node local) [ 240.610630][T10266] loop2: detected capacity change from 0 to 32768 [ 241.161210][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 241.358377][T10282] loop0: detected capacity change from 0 to 1024 [ 241.394138][T10282] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.421702][T10282] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.500076][T10282] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 241.543830][T10292] loop3: detected capacity change from 0 to 2048 [ 241.552606][T10282] System zones: 0-1, 3-36 [ 241.582816][T10295] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.617757][T10282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.829636][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.840606][T10335] netlink: 77 bytes leftover after parsing attributes in process `syz.2.2032'. [ 243.183885][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2040'. [ 244.193873][T10387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2058'. [ 244.925915][T10412] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551611) [ 244.956882][T10412] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 245.363664][T10404] loop0: detected capacity change from 0 to 32768 [ 245.423693][T10424] netlink: 'syz.2.2082': attribute type 3 has an invalid length. [ 245.612110][T10426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2076'. [ 245.647767][T10426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2076'. [ 245.671970][T10429] netlink: 'syz.1.2077': attribute type 2 has an invalid length. [ 245.712351][T10429] netlink: 'syz.1.2077': attribute type 8 has an invalid length. [ 245.720158][T10429] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2077'. [ 246.560250][T10462] kAFS: unable to lookup cell '.,' [ 246.590592][T10454] loop3: detected capacity change from 0 to 4096 [ 247.281629][T10474] loop1: detected capacity change from 0 to 4096 [ 247.398952][T10483] loop0: detected capacity change from 0 to 512 [ 247.509260][T10483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.581114][T10483] ext4 filesystem being mounted at /498/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.676092][T10483] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.2105: corrupted xattr block 33: invalid ea_ino [ 247.731631][T10483] fscrypt (loop0, inode 15): Error -117 getting encryption context [ 247.839259][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.874116][T10496] netlink: 'syz.1.2108': attribute type 3 has an invalid length. [ 248.110289][T10506] loop2: detected capacity change from 0 to 64 [ 248.141091][T10506] MINIX-fs: mounting file system with errors, running fsck is recommended [ 248.208379][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 248.208396][ T28] audit: type=1800 audit(1757621071.071:92): pid=10506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2113" name="file1" dev="loop2" ino=8 res=0 errno=0 [ 248.905092][ T5833] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 248.987890][T10504] loop3: detected capacity change from 0 to 32768 [ 249.081168][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 249.111080][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 249.120220][ T5833] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.148008][ T5833] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.183274][ T5833] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 249.198794][ T5833] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 249.219309][ T5833] usb 1-1: Product: syz [ 249.224625][ T5833] usb 1-1: Manufacturer: syz [ 249.237140][ T5833] hub 1-1:4.0: USB hub found [ 249.461594][ T5833] hub 1-1:4.0: 1 port detected [ 249.670563][ T5833] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 249.671910][T10548] delete_channel: no stack [ 249.684548][ T5833] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 249.753675][ T5833] usb 1-1: USB disconnect, device number 12 [ 249.856176][T10552] loop3: detected capacity change from 0 to 256 [ 249.919683][T10554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2137'. [ 249.965558][T10552] FAT-fs (loop3): Directory bread(block 64) failed [ 249.977171][T10554] veth3: entered allmulticast mode [ 249.980636][T10552] FAT-fs (loop3): Directory bread(block 65) failed [ 250.001145][T10552] FAT-fs (loop3): Directory bread(block 66) failed [ 250.018366][T10552] FAT-fs (loop3): Directory bread(block 67) failed [ 250.031064][T10552] FAT-fs (loop3): Directory bread(block 68) failed [ 250.041334][T10552] FAT-fs (loop3): Directory bread(block 69) failed [ 250.051407][T10552] FAT-fs (loop3): Directory bread(block 70) failed [ 250.058007][T10552] FAT-fs (loop3): Directory bread(block 71) failed [ 250.096685][T10552] FAT-fs (loop3): Directory bread(block 72) failed [ 250.129691][T10552] FAT-fs (loop3): Directory bread(block 73) failed [ 250.138669][T10558] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.490015][T10567] loop0: detected capacity change from 0 to 512 [ 251.257330][T10590] loop3: detected capacity change from 0 to 4096 [ 251.855701][T10604] loop3: detected capacity change from 0 to 4096 [ 252.072506][T10609] loop0: detected capacity change from 0 to 8192 [ 252.134465][T10609] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 252.228714][T10609] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 252.241476][T10609] REISERFS (device loop0): using ordered data mode [ 252.248040][T10609] reiserfs: using flush barriers [ 252.264744][T10609] REISERFS warning (device loop0): journal-1393 journal_init: journal 1st super block is invalid: 1st reserved block 130, but actual 1st block is 18 [ 252.630741][T10623] loop2: detected capacity change from 0 to 4096 [ 252.835937][T10636] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.028540][T10642] loop1: detected capacity change from 0 to 64 [ 253.370443][T10652] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.2184' sets config #113102692 [ 253.391066][T10654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2185'. [ 253.797958][T10667] loop3: detected capacity change from 0 to 256 [ 253.857768][T10671] loop2: detected capacity change from 0 to 64 [ 253.876503][T10667] FAT-fs (loop3): Directory bread(block 64) failed [ 253.902219][T10667] FAT-fs (loop3): Directory bread(block 65) failed [ 253.915797][T10667] FAT-fs (loop3): Directory bread(block 66) failed [ 253.961560][T10667] FAT-fs (loop3): Directory bread(block 67) failed [ 253.982955][T10667] FAT-fs (loop3): Directory bread(block 68) failed [ 254.000094][T10667] FAT-fs (loop3): Directory bread(block 69) failed [ 254.031155][T10667] FAT-fs (loop3): Directory bread(block 70) failed [ 254.051317][T10667] FAT-fs (loop3): Directory bread(block 71) failed [ 254.077751][T10667] FAT-fs (loop3): Directory bread(block 72) failed [ 254.100008][T10667] FAT-fs (loop3): Directory bread(block 73) failed [ 255.191069][ T786] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 255.381621][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 255.403123][ T786] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 255.432102][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.470936][ T786] usb 3-1: config 0 has no interface number 0 [ 255.477144][ T786] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 255.507870][ T786] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 255.553294][ T786] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.588824][ T786] usb 3-1: config 0 interface 52 has no altsetting 0 [ 255.613458][ T786] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 255.651054][ T786] usb 3-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 255.660070][ T786] usb 3-1: Product: syz [ 255.684101][ T786] usb 3-1: SerialNumber: syz [ 255.700530][ T786] usb 3-1: config 0 descriptor?? [ 255.755921][T10732] loop3: detected capacity change from 0 to 2048 [ 255.795647][T10732] NILFS (loop3): unrecognized mount option ">" [ 255.937728][ T786] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 255.972588][ T786] synaptics_usb: probe of 3-1:0.52 failed with error -5 [ 256.128042][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.134615][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.158711][ T786] usb 3-1: USB disconnect, device number 10 [ 256.302623][T10743] netlink: 'syz.0.2227': attribute type 30 has an invalid length. [ 256.483462][T10736] loop1: detected capacity change from 0 to 32768 [ 256.654367][ T5867] read_mapping_page failed! [ 256.658963][ T5867] ERROR: (device loop1): txCommit: [ 256.658963][ T5867] [ 256.697471][ T5867] jfs_write_inode: jfs_commit_inode failed! [ 257.355121][T10746] loop3: detected capacity change from 0 to 32768 [ 257.383625][T10746] (syz.3.2229,10746,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 257.433488][T10746] (syz.3.2229,10746,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 257.504209][T10746] JBD2: Ignoring recovery information on journal [ 257.581715][T10746] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 257.826454][T10780] loop0: detected capacity change from 0 to 64 [ 257.917722][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 258.526868][T10776] loop2: detected capacity change from 0 to 32768 [ 258.582110][T10776] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2243 (10776) [ 258.629861][T10776] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 258.649289][T10776] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 258.673458][T10776] BTRFS info (device loop2): enabling auto defrag [ 258.702904][T10776] BTRFS info (device loop2): doing ref verification [ 258.750938][T10776] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 258.772120][T10776] BTRFS info (device loop2): force lzo compression, level 0 [ 258.805484][T10776] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 258.836467][T10776] BTRFS info (device loop2): trying to use backup root at mount time [ 258.845599][T10776] BTRFS info (device loop2): max_inline at 4096 [ 258.865831][T10776] BTRFS info (device loop2): enabling ssd optimizations [ 258.881145][T10776] BTRFS info (device loop2): using spread ssd allocation scheme [ 258.931161][T10776] BTRFS info (device loop2): using free space tree [ 258.938452][T10776] workqueue: max_active 65524 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 258.994690][T10776] workqueue: max_active 65524 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 259.027215][T10776] workqueue: max_active 65524 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 259.101193][T10776] workqueue: max_active 65524 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 259.201058][T10776] workqueue: max_active 65524 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 259.232039][T10776] workqueue: max_active 65524 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 259.272525][T10776] workqueue: max_active 65524 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 259.451048][T10776] BTRFS info (device loop2): auto enabling async discard [ 259.902857][ T5786] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 260.677457][ T28] audit: type=1326 audit(1757621083.541:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd5f8eba9 code=0x7ffc0000 [ 260.775842][ T28] audit: type=1326 audit(1757621083.541:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd5f8eba9 code=0x7ffc0000 [ 260.872008][ T28] audit: type=1326 audit(1757621083.591:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f0cd5f8eba9 code=0x7ffc0000 [ 260.902302][ T28] audit: type=1326 audit(1757621083.591:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd5f8eba9 code=0x7ffc0000 [ 260.933342][ T28] audit: type=1326 audit(1757621083.591:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.2278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd5f8eba9 code=0x7ffc0000 [ 260.996409][T10874] netlink: 'syz.1.2282': attribute type 32 has an invalid length. [ 261.020807][T10848] loop3: detected capacity change from 0 to 32768 [ 261.077371][T10848] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 261.143008][T10848] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 261.449795][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 261.858660][T10870] loop0: detected capacity change from 0 to 32768 [ 261.906867][T10870] [ 261.906867][T10870] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.906867][T10870] [ 261.969207][T10870] [ 261.969207][T10870] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.969207][T10870] [ 262.010690][T10870] [ 262.010690][T10870] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.010690][T10870] [ 262.071287][T10870] [ 262.071287][T10870] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.071287][T10870] [ 262.101012][T10870] [ 262.101012][T10870] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.101012][T10870] [ 262.118812][T10870] [ 262.118812][T10870] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.118812][T10870] [ 262.188651][ T111] [ 262.188651][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.188651][ T111] [ 262.242917][ T5867] [ 262.242917][ T5867] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.242917][ T5867] [ 262.285673][ T5867] [ 262.285673][ T5867] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.285673][ T5867] [ 262.317094][ T5781] [ 262.317094][ T5781] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.317094][ T5781] [ 262.336201][ T110] [ 262.336201][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.336201][ T110] [ 262.390979][ T5781] [ 262.390979][ T5781] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.390979][ T5781] [ 262.480978][T10888] loop3: detected capacity change from 0 to 32768 [ 262.501344][T10888] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.2288 (10888) [ 262.530007][T10888] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 262.558649][T10888] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 262.586451][T10888] BTRFS info (device loop3): force zlib compression, level 3 [ 262.597234][T10888] BTRFS info (device loop3): force clearing of disk cache [ 262.620222][T10888] BTRFS info (device loop3): setting nodatasum [ 262.641213][T10888] BTRFS info (device loop3): disabling tree log [ 262.656656][T10888] BTRFS info (device loop3): enabling disk space caching [ 262.684366][T10888] BTRFS info (device loop3): disk space caching is enabled [ 262.800966][T10888] BTRFS info (device loop3): auto enabling async discard [ 262.951552][T10888] BTRFS error (device loop3: state M): unrecognized mount option '00000000000000000000' [ 263.032491][T10927] trusted_key: encrypted_key: keylen parameter is missing [ 263.066173][ T5787] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 265.081104][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 265.951262][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2350'. [ 266.268406][T11042] loop0: detected capacity change from 0 to 1024 [ 266.346719][T11044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2357'. [ 266.412753][T11046] cgroup: Unknown subsys name 'smackfshat' [ 266.853308][T11025] loop2: detected capacity change from 0 to 40427 [ 266.954747][T11025] F2FS-fs (loop2): Found nat_bits in checkpoint [ 267.135774][T11025] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 267.556836][T11080] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2374'. [ 267.600958][T11080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2374'. [ 267.621042][T11080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2374'. [ 268.073286][T11094] netlink: 'syz.1.2379': attribute type 21 has an invalid length. [ 268.089797][T11074] loop0: detected capacity change from 0 to 32768 [ 268.110501][T11092] loop2: detected capacity change from 0 to 2048 [ 268.123295][T11074] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.2370 (11074) [ 268.142570][T11092] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27485, location=27485 [ 268.187610][T11074] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 268.211612][T11092] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.220483][T11074] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 268.220527][T11074] BTRFS info (device loop0): enabling disk space caching [ 268.236754][T11074] BTRFS info (device loop0): force clearing of disk cache [ 268.247595][T11074] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 268.322466][T11074] BTRFS info (device loop0): use zstd compression, level 3 [ 268.350151][T11074] BTRFS info (device loop0): disk space caching is enabled [ 268.642085][T11074] BTRFS info (device loop0): enabling ssd optimizations [ 268.649122][T11074] BTRFS info (device loop0): auto enabling async discard [ 268.706010][T11074] BTRFS info (device loop0): rebuilding free space tree [ 268.776033][T11118] xt_policy: neither incoming nor outgoing policy selected [ 268.833340][T11074] BTRFS info (device loop0): disabling free space tree [ 268.840332][T11074] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 268.908209][T11074] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 269.072973][T11093] loop3: detected capacity change from 0 to 40427 [ 269.079418][ T5781] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 269.145736][T11093] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 269.182142][T11093] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 269.246778][T11093] F2FS-fs (loop3): invalid crc value [ 269.309647][ T5788] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop0 scanned by udevd (5788) [ 269.335047][T11093] F2FS-fs (loop3): Found nat_bits in checkpoint [ 269.651697][T11093] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 269.658841][T11093] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 269.666705][T11140] capability: warning: `syz.2.2393' uses 32-bit capabilities (legacy support in use) [ 270.141376][ T5876] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 270.348549][ T5876] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 270.368721][ T5876] usb 2-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 270.391281][ T5876] usb 2-1: Product: syz [ 270.395678][ T5876] usb 2-1: Manufacturer: syz [ 270.400484][ T5876] usb 2-1: SerialNumber: syz [ 270.423289][ T5876] r8152-cfgselector 2-1: config 0 descriptor?? [ 270.567255][T11159] netlink: 'syz.0.2402': attribute type 3 has an invalid length. [ 270.600967][T11159] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2402'. [ 270.672038][ T5876] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 270.822462][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2399'. [ 270.903598][ T786] usb 2-1: USB disconnect, device number 5 [ 271.755999][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2421'. [ 271.998846][T11205] netlink: zone id is out of range [ 272.321201][ T5876] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 272.511190][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 272.539066][ T5876] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 272.581363][ T5876] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 272.589448][ T5876] usb 1-1: Product: syz [ 272.600939][ T5876] usb 1-1: Manufacturer: syz [ 272.605611][ T5876] usb 1-1: SerialNumber: syz [ 272.634568][ T5876] usb 1-1: config 0 descriptor?? [ 272.659459][ T5876] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 272.958112][T11228] loop1: detected capacity change from 0 to 64 [ 273.101035][ T5876] gspca_zc3xx: reg_r err -71 [ 273.105878][ T5876] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 273.115316][T11226] wg1 speed is unknown, defaulting to 1000 [ 273.141326][ T5876] usb 1-1: USB disconnect, device number 13 [ 273.153636][T11226] vxcan1 speed is unknown, defaulting to 1000 [ 273.716338][T11243] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 274.227279][T11257] loop0: detected capacity change from 0 to 64 [ 274.241793][T11257] hfs: unable to locate alternate MDB [ 274.261030][T11257] hfs: continuing without an alternate MDB [ 274.808151][T11270] netlink: 'syz.1.2453': attribute type 29 has an invalid length. [ 274.885391][T11270] netlink: 'syz.1.2453': attribute type 29 has an invalid length. [ 275.063748][T11282] loop2: detected capacity change from 0 to 128 [ 275.089385][T11282] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 275.133532][T11282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.215973][T11282] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 86) has entry where CRC length (28) does not match entry length (24) [ 275.528795][T11288] loop1: detected capacity change from 0 to 2048 [ 275.761563][T11298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.840646][T11288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.021355][T11301] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 276.079679][T11301] EXT4-fs (loop1): Remounting filesystem read-only [ 276.247893][T11309] netlink: 'syz.2.2470': attribute type 1 has an invalid length. [ 276.261381][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.280679][T11309] netlink: 'syz.2.2470': attribute type 2 has an invalid length. [ 276.327433][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2470'. [ 276.509704][T11313] loop0: detected capacity change from 0 to 1024 [ 276.631638][T11317] loop1: detected capacity change from 0 to 1024 [ 277.492421][ T5824] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 277.695007][T11345] xt_hashlimit: size too large, truncated to 1048576 [ 277.702080][ T5824] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 277.702113][ T5824] usb 3-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 277.702134][ T5824] usb 3-1: Product: syz [ 277.702150][ T5824] usb 3-1: Manufacturer: syz [ 277.702165][ T5824] usb 3-1: SerialNumber: syz [ 277.732110][ T5824] r8152-cfgselector 3-1: config 0 descriptor?? [ 277.752318][T11345] xt_hashlimit: max too large, truncated to 1048576 [ 277.968236][ T5824] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 278.166841][T11360] loop3: detected capacity change from 0 to 2048 [ 278.201595][ T5824] usb 3-1: USB disconnect, device number 11 [ 278.248647][T11360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.354322][T11360] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.2496: inline data xattr refers to an external xattr inode [ 278.493966][T11360] EXT4-fs (loop3): Remounting filesystem read-only [ 278.522509][T11374] netlink: 'syz.0.2502': attribute type 29 has an invalid length. [ 278.530800][T11374] netlink: 'syz.0.2502': attribute type 29 has an invalid length. [ 278.625743][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.809992][T11379] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2503'. [ 279.214323][T11393] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2512'. [ 279.481148][ T5824] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 279.490000][T11403] loop0: detected capacity change from 0 to 256 [ 279.501124][T11403] exfat: Deprecated parameter 'utf8' [ 279.534251][T11403] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 279.674175][ T5824] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.685261][ T786] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 279.718214][ T5824] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.752197][ T5824] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 279.770982][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 279.798903][ T5824] usb 2-1: SerialNumber: syz [ 279.858858][ T5824] usb 2-1: 0:2 : does not exist [ 279.895368][ T786] usb 4-1: Using ep0 maxpacket: 8 [ 279.936865][ T786] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 279.971045][ T786] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 279.992471][ T786] usb 4-1: Product: syz [ 279.996761][ T786] usb 4-1: Manufacturer: syz [ 280.010925][ T786] usb 4-1: SerialNumber: syz [ 280.061287][ T786] usb 4-1: config 0 descriptor?? [ 280.097961][ T786] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 280.162700][T11415] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 280.181571][T11415] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 280.412067][ T787] usb 2-1: USB disconnect, device number 6 [ 280.523774][ T786] gspca_zc3xx: reg_r err -71 [ 280.536018][ T786] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 280.574167][ T786] usb 4-1: USB disconnect, device number 9 [ 280.657209][T11423] loop0: detected capacity change from 0 to 4096 [ 280.889604][T11431] loop2: detected capacity change from 0 to 512 [ 280.925136][T11431] EXT4-fs error (device loop2): __ext4_iget:5053: inode #11: block 1: comm syz.2.2530: invalid block [ 280.942988][T11431] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2530: couldn't read orphan inode 11 (err -117) [ 281.004281][T11431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.159529][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.666386][T11455] xt_l2tp: v2 sid > 0xffff: 262144 [ 282.821721][T11498] loop1: detected capacity change from 0 to 764 [ 282.842460][T11490] wg1 speed is unknown, defaulting to 1000 [ 282.867748][T11490] vxcan1 speed is unknown, defaulting to 1000 [ 283.130722][T11504] netlink: 'syz.0.2564': attribute type 2 has an invalid length. [ 283.586941][T11518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.732808][T11524] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 284.743429][T11556] batadv2: entered allmulticast mode [ 284.750092][T11556] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 284.929240][T11562] netlink: 'syz.3.2593': attribute type 9 has an invalid length. [ 284.937298][T11562] netlink: 911 bytes leftover after parsing attributes in process `syz.3.2593'. [ 285.277027][T11570] SET target dimension over the limit! [ 285.288462][T11572] loop3: detected capacity change from 0 to 256 [ 285.305161][T11572] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 285.391292][T11572] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 285.437698][T11572] exFAT-fs (loop3): Filesystem has been set read-only [ 285.670047][T11578] loop1: detected capacity change from 0 to 1024 [ 285.750712][T11578] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 285.804746][T11578] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 285.804906][T11578] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.2601: Failed to acquire dquot type 0 [ 285.810767][T11578] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 285.815204][T11578] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #13: comm syz.1.2601: corrupted inode contents [ 285.818629][T11578] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #13: comm syz.1.2601: mark_inode_dirty error [ 285.819149][T11578] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #13: comm syz.1.2601: corrupted inode contents [ 285.819509][T11578] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.2601: mark_inode_dirty error [ 285.819890][T11578] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #13: comm syz.1.2601: corrupted inode contents [ 285.826913][T11578] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 285.827393][T11578] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #13: comm syz.1.2601: corrupted inode contents [ 285.853131][T11578] EXT4-fs error (device loop1): ext4_truncate:4288: inode #13: comm syz.1.2601: mark_inode_dirty error [ 285.855887][T11578] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 285.869554][T11578] EXT4-fs (loop1): 1 truncate cleaned up [ 285.888309][T11578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.901059][T11591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2605'. [ 285.929440][T11578] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 285.929696][T11578] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 285.929720][T11578] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.2601: Failed to acquire dquot type 0 [ 286.053037][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.240652][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2608'. [ 286.651143][T11611] loop0: detected capacity change from 0 to 764 [ 286.969987][T11621] loop1: detected capacity change from 0 to 512 [ 286.999801][T11621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.052681][T11621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.093420][T11621] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 287.111646][T11620] loop2: detected capacity change from 0 to 4096 [ 287.130636][T11621] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002] [ 287.135111][T11620] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 287.139313][T11621] System zones: 0-1, 15-15, 18-18, 34-34 [ 287.166128][T11621] EXT4-fs (loop1): orphan cleanup on readonly fs [ 287.172846][T11621] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 287.182301][T11621] EXT4-fs warning (device loop1): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 287.197944][T11621] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 287.214413][T11621] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2621: bg 0: block 40: padding at end of block bitmap is not set [ 287.261204][T11621] EXT4-fs (loop1): Remounting filesystem read-only [ 287.268537][T11621] EXT4-fs (loop1): 1 truncate cleaned up [ 287.291779][T11620] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 287.297652][T11621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.336287][T11620] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 287.439381][T11620] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 287.476648][T11620] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 287.498818][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.548414][T11626] loop0: detected capacity change from 0 to 1764 [ 287.557639][T11620] ntfs: volume version 3.1. [ 287.629443][T11607] loop3: detected capacity change from 0 to 32768 [ 287.671825][T11626] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 287.708699][T11607] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 287.953563][T11607] XFS (loop3): Ending clean mount [ 288.007582][T11638] loop0: detected capacity change from 0 to 512 [ 288.017789][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2625'. [ 288.054264][T11638] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 288.131029][ T5787] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 288.270733][T11638] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 288.341319][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2635'. [ 288.654474][T11652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2632'. [ 289.049002][T11667] netlink: 'syz.2.2639': attribute type 1 has an invalid length. [ 289.069749][T11667] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2639'. [ 289.091333][T11667] nbd: must specify at least one socket [ 290.132180][T11704] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 290.296858][T11708] loop3: detected capacity change from 0 to 256 [ 290.366043][T11708] FAT-fs (loop3): Directory bread(block 64) failed [ 290.389358][T11708] FAT-fs (loop3): Directory bread(block 65) failed [ 290.419875][T11708] FAT-fs (loop3): Directory bread(block 66) failed [ 290.445313][T11708] FAT-fs (loop3): Directory bread(block 67) failed [ 290.475168][T11708] FAT-fs (loop3): Directory bread(block 68) failed [ 290.511042][T11708] FAT-fs (loop3): Directory bread(block 69) failed [ 290.531077][T11708] FAT-fs (loop3): Directory bread(block 70) failed [ 290.537782][T11708] FAT-fs (loop3): Directory bread(block 71) failed [ 290.567315][T11708] FAT-fs (loop3): Directory bread(block 72) failed [ 290.597427][T11708] FAT-fs (loop3): Directory bread(block 73) failed [ 290.628096][T11672] loop1: detected capacity change from 0 to 32768 [ 290.696183][T11672] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 290.720002][T11672] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 290.788243][T11672] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 290.788243][T11672] inode = 1 71 [ 290.788243][T11672] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 290.812245][T11672] gfs2: fsid=syz:syz.s: G: s:SH n:2/47 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 290.846618][T11672] gfs2: fsid=syz:syz.s: H: s:SH f:eEcH e:0 p:11672 [syz.1.2642] init_journal+0x17f1/0x2260 [ 290.905494][T11672] gfs2: fsid=syz:syz.s: I: n:1/71 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 290.951105][T11672] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 290.958835][T11672] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 291.039214][T11672] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 291.071234][T11727] netlink: 'syz.2.2669': attribute type 1 has an invalid length. [ 291.092146][T11672] gfs2: fsid=syz:syz.s: File system withdrawn [ 291.098333][T11672] CPU: 0 PID: 11672 Comm: syz.1.2642 Not tainted syzkaller #0 [ 291.105854][T11672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.115969][T11672] Call Trace: [ 291.119282][T11672] [ 291.122256][T11672] dump_stack_lvl+0x16c/0x230 [ 291.126985][T11672] ? kobject_uevent_env+0x363/0x8c0 [ 291.132225][T11672] ? show_regs_print_info+0x20/0x20 [ 291.137514][T11672] ? load_image+0x3b0/0x3b0 [ 291.142060][T11672] ? kobject_uevent_env+0x363/0x8c0 [ 291.144620][T11727] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2669'. [ 291.147289][T11672] gfs2_withdraw+0xe50/0x13b0 [ 291.161067][T11672] ? gfs2_lm+0x220/0x220 [ 291.165379][T11672] ? make_kgid+0x1ae/0x640 [ 291.169851][T11672] ? preempt_schedule+0xab/0xc0 [ 291.174774][T11672] ? gfs2_consist_inode_i+0xf5/0x110 [ 291.180125][T11672] gfs2_inode_refresh+0xb83/0xff0 [ 291.185223][T11672] ? gfs2_inode_metasync+0xf0/0xf0 [ 291.190572][T11672] ? gfs2_glock_nq+0xd4f/0x1420 [ 291.195498][T11672] gfs2_instantiate+0x162/0x220 [ 291.200407][T11672] gfs2_glock_wait+0x1d4/0x2a0 [ 291.205242][T11672] check_journal_clean+0x11d/0x300 [ 291.210417][T11672] ? gfs2_trans_remove_revoke+0x370/0x370 [ 291.216199][T11672] ? init_journal+0x17f1/0x2260 [ 291.221119][T11672] ? __rwlock_init+0x150/0x150 [ 291.225947][T11672] ? do_raw_spin_unlock+0x121/0x230 [ 291.231294][T11672] ? _raw_spin_unlock+0x28/0x40 [ 291.236196][T11672] ? gfs2_jdesc_find+0xab/0xc0 [ 291.241018][T11672] init_journal+0x17f1/0x2260 [ 291.245746][T11672] ? gfs2_glock_dq_uninit+0x28/0xe0 [ 291.250996][T11672] ? init_inodes+0xdb/0x320 [ 291.255551][T11672] ? vsnprintf+0x7b2/0x1a40 [ 291.260097][T11672] ? _compound_head+0x120/0x120 [ 291.265005][T11672] ? vsnprintf+0x1957/0x1a40 [ 291.269655][T11672] ? snprintf+0xdb/0x120 [ 291.273949][T11672] ? init_inodes+0xdb/0x320 [ 291.278519][T11672] ? vscnprintf+0x80/0x80 [ 291.282902][T11672] ? gfs2_glock_nq_num+0x183/0x1c0 [ 291.288078][T11672] init_inodes+0xdb/0x320 [ 291.292475][T11672] gfs2_fill_super+0x1815/0x1f80 [ 291.297500][T11672] ? gfs2_reconfigure+0xb10/0xb10 [ 291.302593][T11672] ? init_locking+0xb8/0x200 [ 291.307236][T11672] ? setup_bdev_super+0x56b/0x660 [ 291.312289][T11672] get_tree_bdev+0x3e4/0x510 [ 291.316913][T11672] ? end_current_label_crit_section+0x170/0x170 [ 291.323175][T11672] ? gfs2_reconfigure+0xb10/0xb10 [ 291.328223][T11672] ? setup_bdev_super+0x660/0x660 [ 291.333273][T11672] gfs2_get_tree+0x51/0x1e0 [ 291.337799][T11672] vfs_get_tree+0x8c/0x280 [ 291.342239][T11672] do_new_mount+0x24b/0xa40 [ 291.346767][T11672] __se_sys_mount+0x2da/0x3c0 [ 291.351464][T11672] ? __x64_sys_mount+0xc0/0xc0 [ 291.356241][T11672] ? lockdep_hardirqs_on+0x98/0x150 [ 291.361573][T11672] ? __x64_sys_mount+0x20/0xc0 [ 291.366353][T11672] do_syscall_64+0x55/0xb0 [ 291.370879][T11672] ? clear_bhb_loop+0x40/0x90 [ 291.375594][T11672] ? clear_bhb_loop+0x40/0x90 [ 291.380289][T11672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.386209][T11672] RIP: 0033:0x7f0cd5f9034a [ 291.390654][T11672] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.410481][T11672] RSP: 002b:00007f0cd6ecae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 291.418929][T11672] RAX: ffffffffffffffda RBX: 00007f0cd6ecaef0 RCX: 00007f0cd5f9034a [ 291.426919][T11672] RDX: 0000200000000000 RSI: 0000200000037f80 RDI: 00007f0cd6ecaeb0 [ 291.434909][T11672] RBP: 0000200000000000 R08: 00007f0cd6ecaef0 R09: 0000000000000010 [ 291.442900][T11672] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000037f80 [ 291.450893][T11672] R13: 00007f0cd6ecaeb0 R14: 0000000000037f6a R15: 0000200000000040 [ 291.458925][T11672] [ 291.631398][T11672] gfs2: fsid=syz:syz.s: Error -5 locking journal for spectator mount. [ 291.866310][T11745] ieee802154 phy0 wpan0: encryption failed: -22 [ 292.154552][T11751] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 292.608081][T11737] loop3: detected capacity change from 0 to 32768 [ 292.703903][T11765] netlink: 'syz.2.2688': attribute type 9 has an invalid length. [ 292.716808][T11765] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2688'. [ 292.758843][T11737] ERROR: (device loop3): dbAlloc: unable to allocate blocks [ 292.758843][T11737] [ 292.777726][T11737] ERROR: (device loop3): remounting filesystem as read-only [ 292.805485][T11737] jfs_create: dtInsert returned -EIO [ 292.830042][T11737] ERROR: (device loop3): jfs_create: [ 292.830042][T11737] [ 293.188066][T11774] loop0: detected capacity change from 0 to 1024 [ 293.419922][ T12] hfsplus: b-tree write err: -5, ino 4 [ 293.570590][T11788] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 293.608314][T11788] overlayfs: missing 'lowerdir' [ 294.363596][T11819] netlink: 'syz.2.2713': attribute type 1 has an invalid length. [ 294.386942][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2713'. [ 294.855004][T11837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2722'. [ 294.970462][T11841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2724'. [ 295.312157][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2730'. [ 295.442892][T11857] loop2: detected capacity change from 0 to 512 [ 295.480150][T11857] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.531608][T11857] EXT4-fs (loop2): orphan cleanup on readonly fs [ 295.538028][T11857] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 295.558631][T11857] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.2732: attempt to clear invalid blocks 2 len 1 [ 295.579454][T11857] EXT4-fs (loop2): Remounting filesystem read-only [ 295.587208][T11857] EXT4-fs (loop2): 1 truncate cleaned up [ 295.596340][T11857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 295.736259][T11865] ipip0: entered promiscuous mode [ 295.771929][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.860451][T11870] loop3: detected capacity change from 0 to 512 [ 295.867841][T11870] EXT4-fs: Ignoring removed bh option [ 295.892524][T11870] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 295.920295][T11870] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 295.977971][T11870] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 296.007872][T11870] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 296.055545][T11870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.169955][T11870] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.2740: bg 0: block 353: padding at end of block bitmap is not set [ 296.439486][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.657874][T11899] syz_tun: left promiscuous mode [ 296.677629][T11899] infiniband syz2: set active [ 296.686299][T11899] infiniband syz2: set active [ 296.698382][T11899] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.709204][T11899] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.722525][T11900] loop2: detected capacity change from 0 to 2048 [ 296.752850][T11900] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 296.792259][T11900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.849939][T11900] EXT4-fs error (device loop2): empty_inline_dir:1857: inode #12: block 9: comm syz.2.2752: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 296.890228][T11900] EXT4-fs (loop2): Remounting filesystem read-only [ 296.931833][T11900] EXT4-fs warning (device loop2): empty_inline_dir:1864: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 297.022134][T11899] bond1: left promiscuous mode [ 297.041001][ T5833] vxcan1 speed is unknown, defaulting to 1000 [ 297.074255][ T27] vxcan1 speed is unknown, defaulting to 1000 [ 297.085078][T11908] xfrm0: entered promiscuous mode [ 297.098352][T11908] xfrm0: entered allmulticast mode [ 297.105951][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.584302][T11925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2762'. [ 297.610371][T11927] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 297.629199][T11927] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 297.647939][T11927] overlayfs: missing 'lowerdir' [ 297.962343][T11938] loop0: detected capacity change from 0 to 512 [ 297.987157][T11938] EXT4-fs (loop0): Test dummy encryption mode enabled [ 298.002472][T11938] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 298.072349][T11938] EXT4-fs (loop0): 1 truncate cleaned up [ 298.079454][T11938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.361135][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 298.407660][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.769947][T11955] loop0: detected capacity change from 0 to 512 [ 298.822225][T11955] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 298.885670][T11955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.895387][T11936] loop3: detected capacity change from 0 to 32768 [ 298.914169][T11955] ext4 filesystem being mounted at /684/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.925045][T11936] (syz.3.2766,11936,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 298.946037][T11936] (syz.3.2766,11936,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 298.999796][T11936] JBD2: Ignoring recovery information on journal [ 299.010412][T11955] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 299.042995][T11955] EXT4-fs (loop0): Remounting filesystem read-only [ 299.103110][T11936] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 299.125873][T11936] (syz.3.2766,11936,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 299.159220][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.172588][ T163] __quota_error: 16 callbacks suppressed [ 299.172604][ T163] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 299.207281][ T163] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 299.425222][T11936] (syz.3.2766,11936,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 299.439673][ T28] audit: type=1326 audit(1757621122.271:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11967 comm="syz.1.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd5f8eba9 code=0x7ffc0000 [ 299.497636][T11936] (syz.3.2766,11936,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 299.512272][ T28] audit: type=1326 audit(1757621122.271:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11967 comm="syz.1.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd5f8eba9 code=0x7ffc0000 [ 299.538185][T11936] (syz.3.2766,11936,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 299.571025][ T28] audit: type=1326 audit(1757621122.281:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11967 comm="syz.1.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f0cd5f8eba9 code=0x7ffc0000 [ 299.599448][T11936] (syz.3.2766,11936,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 299.638223][T11936] (syz.3.2766,11936,0):ocfs2_quota_read:201 ERROR: status = -5 [ 299.658222][ T28] audit: type=1326 audit(1757621122.281:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11967 comm="syz.1.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd5f8eba9 code=0x7ffc0000 [ 299.681096][T11936] Quota error (device loop3): find_block_dqentry: Can't read quota tree block 6 [ 299.697475][T11936] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 299.718260][ T28] audit: type=1326 audit(1757621122.281:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11967 comm="syz.1.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd5f8eba9 code=0x7ffc0000 [ 299.755790][T11936] (syz.3.2766,11936,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 299.777910][T11936] (syz.3.2766,11936,1):ocfs2_mknod:314 ERROR: status = -5 [ 299.795734][T11936] (syz.3.2766,11936,1):ocfs2_mknod:502 ERROR: status = -5 [ 299.821213][T11936] (syz.3.2766,11936,1):ocfs2_mkdir:659 ERROR: status = -5 [ 299.877320][T11981] ieee802154 phy0 wpan0: encryption failed: -22 [ 300.076962][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 300.481309][T12001] netlink: 'syz.0.2794': attribute type 2 has an invalid length. [ 300.558037][T12003] loop3: detected capacity change from 0 to 256 [ 300.596208][T12005] loop1: detected capacity change from 0 to 764 [ 300.609749][T12003] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 300.648971][T12003] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 300.708464][T12007] loop2: detected capacity change from 0 to 128 [ 300.711168][T12003] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x712be3da, utbl_chksum : 0xe619d30d) [ 300.829821][T12003] exFAT-fs (loop3): hint_cluster is invalid (8454146), rewind to the first cluster [ 300.875089][T12003] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805e940e60 iblock : 8, err : -5) [ 300.901464][T12003] exFAT-fs (loop3): Filesystem has been set read-only [ 300.909684][T12003] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00810001) [ 300.943746][T12003] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00810001) [ 301.371402][T12027] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 301.634078][T12035] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.654929][T12034] loop1: detected capacity change from 0 to 2048 [ 301.668165][T12035] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.684471][T12034] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 301.730354][T12035] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 301.740731][T12035] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 301.745013][T12034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.748974][T12035] gtp0: left promiscuous mode [ 301.843679][T12034] EXT4-fs error (device loop1): empty_inline_dir:1857: inode #12: block 9: comm syz.1.2810: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 301.887444][T12034] EXT4-fs (loop1): Remounting filesystem read-only [ 301.894250][T12034] EXT4-fs warning (device loop1): empty_inline_dir:1864: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 301.941049][T12045] loop3: detected capacity change from 0 to 1024 [ 301.992768][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.020788][T12047] loop2: detected capacity change from 0 to 16 [ 302.060166][T12047] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 302.190164][T12049] loop0: detected capacity change from 0 to 2048 [ 302.270704][T12049] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 302.384928][T12049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.469820][T12049] EXT4-fs error (device loop0): empty_inline_dir:1857: inode #12: block 9: comm syz.0.2824: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 302.555733][T12049] EXT4-fs (loop0): Remounting filesystem read-only [ 302.581046][T12049] EXT4-fs warning (device loop0): empty_inline_dir:1864: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 302.733044][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.860957][ T787] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 303.061253][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 303.070284][ T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.093759][ T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.111582][ T787] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.128674][ T787] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 303.141343][ T787] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 303.160151][ T787] usb 3-1: Product: syz [ 303.171188][ T787] usb 3-1: Manufacturer: syz [ 303.180773][ T787] usb 3-1: SerialNumber: syz [ 303.213572][ T787] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input17 [ 303.421039][ T5876] usb 3-1: USB disconnect, device number 12 [ 303.462314][ T5876] appletouch 3-1:1.0: input: appletouch disconnected [ 303.998756][T12092] loop0: detected capacity change from 0 to 128 [ 304.034523][T12092] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 304.179560][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.221361][ T787] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 304.347717][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2841'. [ 304.416213][ T787] usb 2-1: unable to get BOS descriptor or descriptor too short [ 304.434496][ T787] usb 2-1: not running at top speed; connect to a high speed hub [ 304.482653][ T787] usb 2-1: config 5 has an invalid interface number: 64 but max is 0 [ 304.507411][ T787] usb 2-1: config 5 has no interface number 0 [ 304.531175][ T787] usb 2-1: config 5 interface 64 has no altsetting 0 [ 304.556277][ T787] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=28.39 [ 304.586034][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.611105][ T787] usb 2-1: Product: syz [ 304.621333][ T787] usb 2-1: Manufacturer: syz [ 304.636262][ T787] usb 2-1: SerialNumber: syz [ 304.859962][T12099] loop3: detected capacity change from 0 to 32768 [ 304.870361][T12099] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2840 (12099) [ 304.911249][ T787] snd-usb-audio: probe of 2-1:5.64 failed with error -71 [ 304.916022][T12099] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 304.939225][ T787] usb 2-1: USB disconnect, device number 7 [ 304.964142][T12099] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 305.001609][T12099] BTRFS info (device loop3): using free space tree [ 305.197303][T12099] BTRFS info (device loop3): enabling ssd optimizations [ 305.232242][T12099] BTRFS info (device loop3): auto enabling async discard [ 305.497605][ T5787] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 305.537182][T12145] cgroup: noprefix used incorrectly [ 306.116816][T12160] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2865'. [ 306.435347][T12173] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2869'. [ 306.538448][ T28] audit: type=1326 audit(1757621129.401:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7678eba9 code=0x7ffc0000 [ 306.568496][ T28] audit: type=1326 audit(1757621129.401:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7678eba9 code=0x7ffc0000 [ 306.681094][ T28] audit: type=1326 audit(1757621129.411:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4f7678eba9 code=0x7ffc0000 [ 306.731281][T12181] cgroup: Name too long [ 306.781044][ T28] audit: type=1326 audit(1757621129.411:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12175 comm="syz.2.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7678eba9 code=0x7ffc0000 [ 306.815267][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2874'. [ 306.928468][T12188] loop3: detected capacity change from 0 to 512 [ 306.929957][T12189] xt_ecn: cannot match TCP bits for non-tcp packets [ 306.984379][T12188] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 307.009484][T12192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2877'. [ 307.019281][T12192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2877'. [ 307.044062][T12188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.144576][T12196] loop2: detected capacity change from 0 to 4096 [ 307.151141][T12188] ext4 filesystem being mounted at /679/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.171666][T12196] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 307.290100][T12188] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 307.377204][T12188] EXT4-fs (loop3): Remounting filesystem read-only [ 307.394819][T12196] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 307.435597][T12196] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 307.471644][T12202] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2882'. [ 307.534504][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.555657][ T58] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 307.582149][ T58] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 308.051100][ T9827] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 308.231521][ T9827] usb 2-1: Using ep0 maxpacket: 16 [ 308.245624][ T9827] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 308.261045][ T9827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.281412][ T9827] usb 2-1: Product: syz [ 308.285718][ T9827] usb 2-1: Manufacturer: syz [ 308.310804][ T9827] usb 2-1: SerialNumber: syz [ 308.329555][ T9827] usb 2-1: config 0 descriptor?? [ 308.362581][ T9827] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 308.581180][ T9827] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 308.589427][ T9827] visor: probe of 2-1:0.0 failed with error -5 [ 308.845192][ T5833] usb 2-1: USB disconnect, device number 8 [ 308.884418][T12245] rtc_cmos 00:00: Alarms can be up to one day in the future [ 308.893994][T12246] x_tables: unsorted underflow at hook 4 [ 309.270618][T12260] loop2: detected capacity change from 0 to 2048 [ 309.289681][T12262] netlink: 'syz.0.2912': attribute type 6 has an invalid length. [ 309.344867][T12263] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.494710][T12260] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 309.540974][T12260] Remounting filesystem read-only [ 309.615314][T12267] loop1: detected capacity change from 0 to 512 [ 309.645860][T12267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 309.720515][ T5786] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 309.737915][ T5786] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 309.765598][T12267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.782491][ T5786] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.831788][ T5786] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.840727][ T5786] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.841766][T12267] ext4 filesystem being mounted at /743/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.864165][ T5786] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 309.905435][ T5786] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 309.949115][ T5786] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 309.990997][ T5786] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 309.998384][ T5786] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 310.020210][ T5786] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 310.047662][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.290182][T12288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2923'. [ 310.320086][T12288] netlink: 30 bytes leftover after parsing attributes in process `syz.1.2923'. [ 310.540203][T12296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2928'. [ 311.155013][T12314] tmpfs: Bad value for 'mpol' [ 311.632803][T12328] loop3: detected capacity change from 0 to 1024 [ 311.785095][ T11] hfsplus: b-tree write err: -5, ino 4 [ 312.119924][T12337] loop1: detected capacity change from 0 to 4096 [ 312.469469][T12348] loop3: detected capacity change from 0 to 256 [ 312.550735][T12348] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 312.641392][T12350] netlink: 'syz.1.2953': attribute type 1 has an invalid length. [ 312.641930][ T5833] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 312.671100][T12350] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2953'. [ 312.694440][T12350] netlink: 'syz.1.2953': attribute type 1 has an invalid length. [ 312.720310][T12352] netlink: 'syz.2.2954': attribute type 10 has an invalid length. [ 312.747580][T12352] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2954'. [ 312.776978][T12352] veth0_vlan: entered allmulticast mode [ 312.789552][T12352] bridge0: port 3(veth0_vlan) entered blocking state [ 312.801987][T12352] bridge0: port 3(veth0_vlan) entered disabled state [ 312.825928][T12352] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 312.913145][ T5833] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 312.923280][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.951329][ T5833] usb 1-1: config 0 descriptor?? [ 313.001564][T12359] sctp: [Deprecated]: syz.2.2957 (pid 12359) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.001564][T12359] Use struct sctp_sack_info instead [ 313.160802][T12365] overlayfs: failed to resolve 'smackfsdef=&:': -2 [ 313.408806][ T5833] ath6kl: Failed to read usb control message: -71 [ 313.425856][ T5833] ath6kl: Unable to read the bmi data from the device: -71 [ 313.450941][ T5833] ath6kl: Unable to recv target info: -71 [ 313.471005][ T9827] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 313.482742][ T5833] ath6kl: Failed to init ath6kl core: -71 [ 313.501501][ T5833] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 313.551452][ T5833] usb 1-1: USB disconnect, device number 14 [ 313.627512][T12381] loop1: detected capacity change from 0 to 512 [ 313.671381][ T9827] usb 4-1: Using ep0 maxpacket: 8 [ 313.689039][ T9827] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 313.701721][T12381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.722994][ T9827] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 313.751088][ T9827] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 313.752702][T12381] ext4 filesystem being mounted at /759/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.760934][ T9827] usb 4-1: Product: syz [ 313.774946][ T9827] usb 4-1: Manufacturer: syz [ 313.779602][ T9827] usb 4-1: SerialNumber: syz [ 313.865665][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.011136][ T9827] usb 4-1: Invalid connection information received from device [ 314.089325][T12391] loop2: detected capacity change from 0 to 256 [ 314.122020][T12391] exfat: Deprecated parameter 'utf8' [ 314.159750][T12391] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 314.191766][T12394] SET target dimension over the limit! [ 314.255849][ T9827] usb 4-1: USB disconnect, device number 10 [ 314.700604][T12410] libceph: resolve '0.0' (ret=-3): failed [ 314.850483][T12417] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 315.189171][T12429] loop1: detected capacity change from 0 to 512 [ 315.216718][T12429] EXT4-fs: Ignoring removed nomblk_io_submit option [ 315.242684][T12429] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 315.265617][T12429] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 315.302226][T12429] EXT4-fs (loop1): orphan cleanup on readonly fs [ 315.327456][T12429] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 315.360655][T12429] EXT4-fs warning (device loop1): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 315.381314][ T9827] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 315.389851][T12429] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 315.406635][T12429] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2989: bg 0: block 40: padding at end of block bitmap is not set [ 315.428584][T12429] EXT4-fs (loop1): Remounting filesystem read-only [ 315.436516][T12429] EXT4-fs (loop1): 1 truncate cleaned up [ 315.450315][T12429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.528267][T12423] loop3: detected capacity change from 0 to 32768 [ 315.558843][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.580994][ T786] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 315.600120][ T9827] usb 1-1: Using ep0 maxpacket: 16 [ 315.609182][T12423] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 315.613707][ T9827] usb 1-1: config 0 interface 0 altsetting 67 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.673203][T12423] (syz.3.2986,12423,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 315.689827][ T9827] usb 1-1: config 0 interface 0 has no altsetting 0 [ 315.731034][ T9827] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 315.740498][T12423] (syz.3.2986,12423,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 315.759137][T12423] (syz.3.2986,12423,1):ocfs2_symlink:2068 ERROR: status = -117 [ 315.781076][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 315.786295][ T9827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.823666][ T786] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 315.849840][ T9827] usb 1-1: config 0 descriptor?? [ 315.855995][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.877503][ T5787] (syz-executor,5787,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 315.893407][ T786] usb 3-1: Product: syz [ 315.907956][ T786] usb 3-1: Manufacturer: syz [ 315.915362][ T786] usb 3-1: SerialNumber: syz [ 315.926033][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 315.938217][ T786] usb 3-1: config 0 descriptor?? [ 315.962846][ T786] gspca_main: sq930x-2.14.0 probing 2770:930c [ 316.092045][ T9827] usbhid 1-1:0.0: can't add hid device: -71 [ 316.103755][ T9827] usbhid: probe of 1-1:0.0 failed with error -71 [ 316.116989][T12446] loop1: detected capacity change from 0 to 256 [ 316.161404][ T9827] usb 1-1: USB disconnect, device number 15 [ 316.189221][T12446] exfat: Deprecated parameter 'namecase' [ 316.218360][T12446] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 316.387646][ T786] gspca_sq930x: ucbus_write failed -71 [ 316.432163][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2998'. [ 316.441901][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2998'. [ 316.661202][ T786] gspca_sq930x: Sensor ov9630 not yet treated [ 316.668131][ T786] sq930x: probe of 3-1:0.0 failed with error -22 [ 316.707542][ T786] usb 3-1: USB disconnect, device number 13 [ 317.050047][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.101179][ T5773] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 317.164578][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.277443][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.300971][ T5773] usb 1-1: Using ep0 maxpacket: 16 [ 317.323872][ T5773] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 317.336801][ T5773] usb 1-1: config 0 has no interface number 0 [ 317.353299][ T5773] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 317.399203][ T5773] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 317.409856][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 317.431185][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.449733][ T5773] usb 1-1: Manufacturer: syz [ 317.461142][ T5773] usb 1-1: SerialNumber: syz [ 317.488778][ T5773] usb 1-1: config 0 descriptor?? [ 317.567546][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.574477][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.889672][ T11] : left promiscuous mode [ 317.942409][ T5773] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 318.001541][ T5773] usb 1-1: USB disconnect, device number 16 [ 318.026139][ T5903] udevd[5903]: setting mode of /dev/bus/usb/001/016 to 020664 failed: No such file or directory [ 318.071182][ T5903] udevd[5903]: setting owner of /dev/bus/usb/001/016 to uid=0, gid=0 failed: No such file or directory [ 318.276083][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.286731][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.365880][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.378600][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.393121][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 318.401974][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.651728][T12494] netlink: 'syz.3.3019': attribute type 10 has an invalid length. [ 318.709747][T12494] team0: Device veth1_macvtap failed to register rx_handler [ 318.737857][T12499] loop0: detected capacity change from 0 to 8 [ 318.773615][T12499] SQUASHFS error: Unknown inode type 79 in squashfs_iget! [ 319.028820][T12508] netlink: 'syz.0.3024': attribute type 1 has an invalid length. [ 319.328826][T12483] wg1 speed is unknown, defaulting to 1000 [ 319.365321][T12483] vxcan1 speed is unknown, defaulting to 1000 [ 319.774589][T12530] netlink: 'syz.0.3032': attribute type 4 has an invalid length. [ 319.801847][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3032'. [ 320.035169][T12536] tmpfs: Unknown parameter 'func' [ 320.217081][T12544] loop0: detected capacity change from 0 to 256 [ 320.531963][ T5798] Bluetooth: hci1: command tx timeout [ 321.560420][T12585] loop0: detected capacity change from 0 to 4096 [ 321.702650][T12593] netlink: 'syz.3.3056': attribute type 21 has an invalid length. [ 321.780258][T12483] chnl_net:caif_netlink_parms(): no params data found [ 322.314021][ T11] hsr_slave_0: left promiscuous mode [ 322.400098][ T11] hsr_slave_1: left promiscuous mode [ 322.407842][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.427666][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.445838][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.455913][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.461200][ T786] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 322.579620][ T11] veth1_macvtap: left promiscuous mode [ 322.591647][ T11] veth0_macvtap: left promiscuous mode [ 322.597383][ T11] veth1_vlan: left promiscuous mode [ 322.605389][ T11] veth0_vlan: left promiscuous mode [ 322.610911][ T5798] Bluetooth: hci1: command tx timeout [ 322.638851][T12598] loop3: detected capacity change from 0 to 32768 [ 322.674653][ T786] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 322.689313][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.700552][ T786] usb 3-1: config 0 has no interface number 0 [ 322.706926][ T786] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 322.716975][ T786] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.733915][ T786] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 322.750968][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.759077][ T786] usb 3-1: Product: syz [ 322.770889][ T786] usb 3-1: Manufacturer: syz [ 322.775564][ T786] usb 3-1: SerialNumber: syz [ 322.790410][ T786] usb 3-1: config 0 descriptor?? [ 323.044773][ T786] usbtouchscreen: probe of 3-1:0.117 failed with error -71 [ 323.074279][ T786] usb 3-1: USB disconnect, device number 14 [ 323.103463][T12614] loop3: detected capacity change from 0 to 8 [ 323.124422][T12614] SQUASHFS error: Unknown inode type 79 in squashfs_iget! [ 323.147117][ T11] bond1 (unregistering): Released all slaves [ 324.306632][ T11] team0 (unregistering): Port device team_slave_1 removed [ 324.401289][ T11] team0 (unregistering): Port device team_slave_0 removed [ 324.519247][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.584155][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.682252][ T5798] Bluetooth: hci1: command tx timeout [ 325.290901][ T11] bond0 (unregistering): Released all slaves [ 325.386524][T12643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3079'. [ 325.406676][T12643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3079'. [ 325.677983][T12483] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.695452][T12483] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.703201][T12483] bridge_slave_0: entered allmulticast mode [ 325.719302][T12483] bridge_slave_0: entered promiscuous mode [ 325.755412][T12649] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 325.771972][T12649] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 325.789808][T12653] netlink: 'syz.2.3082': attribute type 10 has an invalid length. [ 325.851287][T12653] team0: Device veth1_macvtap failed to register rx_handler [ 325.932074][T12483] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.954418][T12483] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.979910][T12483] bridge_slave_1: entered allmulticast mode [ 325.992957][T12483] bridge_slave_1: entered promiscuous mode [ 326.078792][T12657] netlink: 'syz.0.3084': attribute type 1 has an invalid length. [ 326.186696][T12483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.263214][T12483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.528230][T12483] team0: Port device team_slave_0 added [ 326.565082][T12483] team0: Port device team_slave_1 added [ 326.616764][T12680] loop0: detected capacity change from 0 to 128 [ 326.694847][T12680] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 326.761071][ T5798] Bluetooth: hci1: command tx timeout [ 326.772247][T12680] hpfs: filesystem error: improperly stopped [ 326.778342][T12680] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 326.801667][T12483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.808732][T12483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.836373][ T11] ------------[ cut here ]------------ [ 326.842944][ T11] WARNING: CPU: 1 PID: 11 at net/xfrm/xfrm_state.c:2997 xfrm_state_fini+0x25c/0x2b0 [ 326.843344][T12680] hpfs: You really don't want any checks? You are crazy... [ 326.853009][ T11] Modules linked in: [ 326.863965][ T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 326.871518][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.881698][ T11] Workqueue: netns cleanup_net [ 326.886568][ T11] RIP: 0010:xfrm_state_fini+0x25c/0x2b0 [ 326.892252][ T11] Code: 5c 41 5d 41 5e 41 5f 5d e9 81 20 00 00 e8 ec d9 66 f8 0f 0b e9 2c fe ff ff e8 e0 d9 66 f8 0f 0b e9 91 fe ff ff e8 d4 d9 66 f8 <0f> 0b 43 80 3c 2c 00 0f 85 fa fe ff ff e9 fd fe ff ff e8 bd d9 66 [ 326.912010][ T11] RSP: 0018:ffffc90000107a98 EFLAGS: 00010293 [ 326.912304][T12680] hpfs: hpfs_map_sector(): read error [ 326.918202][ T11] RAX: ffffffff891eb66c RBX: ffff8880783a8000 RCX: ffff888019e7bc00 [ 326.918224][ T11] RDX: 0000000000000000 RSI: ffffffff8aaabca0 RDI: ffffffff8afc72c0 [ 326.918240][ T11] RBP: 0000000000000040 R08: ffffffff90da750f R09: 1ffffffff21b4ea1 [ 326.918256][ T11] R10: dffffc0000000000 R11: fffffbfff21b4ea2 R12: 1ffff1100f075274 [ 326.956488][T12680] hpfs: code page support is disabled [ 326.962044][ T11] R13: dffffc0000000000 R14: ffff8880783a93a0 R15: ffff888060584300 [ 326.964838][T12680] hpfs: hpfs_map_4sectors(): unaligned read [ 326.970264][ T11] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 326.970289][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.970305][ T11] CR2: 000055a75f90e950 CR3: 000000002e64c000 CR4: 00000000003506e0 [ 327.001069][ T11] Call Trace: [ 327.005678][ T11] [ 327.008668][ T11] xfrm_net_exit+0x25/0x60 [ 327.013407][ T11] cleanup_net+0x6f4/0xb90 [ 327.017895][ T11] ? ops_free_list+0x3b0/0x3b0 [ 327.021628][T12680] hpfs: hpfs_map_4sectors(): unaligned read [ 327.022802][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.033978][ T11] ? process_scheduled_works+0x957/0x15b0 [ 327.036517][T12680] hpfs: filesystem error: unable to find root dir [ 327.039766][ T11] ? process_scheduled_works+0x957/0x15b0 [ 327.052582][ T11] process_scheduled_works+0xa45/0x15b0 [ 327.058230][ T11] ? assign_work+0x400/0x400 [ 327.063025][ T11] ? assign_work+0x39e/0x400 [ 327.067697][ T11] worker_thread+0xa55/0xfc0 [ 327.072458][ T11] kthread+0x2fa/0x390 [ 327.076584][ T11] ? pr_cont_work+0x560/0x560 [ 327.081427][ T11] ? kthread_blkcg+0xd0/0xd0 [ 327.086110][ T11] ret_from_fork+0x48/0x80 [ 327.090586][ T11] ? kthread_blkcg+0xd0/0xd0 [ 327.095533][ T11] ret_from_fork_asm+0x11/0x20 [ 327.100378][ T11] [ 327.103536][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 327.110858][ T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 327.118266][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.128371][ T11] Workqueue: netns cleanup_net [ 327.133206][ T11] Call Trace: [ 327.136545][ T11] [ 327.139513][ T11] dump_stack_lvl+0x16c/0x230 [ 327.144246][ T11] ? show_regs_print_info+0x20/0x20 [ 327.149504][ T11] ? load_image+0x3b0/0x3b0 [ 327.154073][ T11] panic+0x2c0/0x710 [ 327.158081][ T11] ? bpf_jit_dump+0xd0/0xd0 [ 327.161408][T12483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.164258][T12483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.164272][T12483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.164300][T12483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.216530][ T11] ? ret_from_fork_asm+0x11/0x20 [ 327.221505][ T11] __warn+0x2e0/0x470 [ 327.225509][ T11] ? xfrm_state_fini+0x25c/0x2b0 [ 327.230524][ T11] ? xfrm_state_fini+0x25c/0x2b0 [ 327.235501][ T11] report_bug+0x2be/0x4f0 [ 327.239865][ T11] ? xfrm_state_fini+0x25c/0x2b0 [ 327.244822][ T11] ? xfrm_state_fini+0x25c/0x2b0 [ 327.249781][ T11] ? xfrm_state_fini+0x25e/0x2b0 [ 327.254732][ T11] handle_bug+0xcf/0x120 [ 327.258991][ T11] exc_invalid_op+0x1a/0x50 [ 327.263512][ T11] asm_exc_invalid_op+0x1a/0x20 [ 327.268373][ T11] RIP: 0010:xfrm_state_fini+0x25c/0x2b0 [ 327.273939][ T11] Code: 5c 41 5d 41 5e 41 5f 5d e9 81 20 00 00 e8 ec d9 66 f8 0f 0b e9 2c fe ff ff e8 e0 d9 66 f8 0f 0b e9 91 fe ff ff e8 d4 d9 66 f8 <0f> 0b 43 80 3c 2c 00 0f 85 fa fe ff ff e9 fd fe ff ff e8 bd d9 66 [ 327.293667][ T11] RSP: 0018:ffffc90000107a98 EFLAGS: 00010293 [ 327.299762][ T11] RAX: ffffffff891eb66c RBX: ffff8880783a8000 RCX: ffff888019e7bc00 [ 327.307755][ T11] RDX: 0000000000000000 RSI: ffffffff8aaabca0 RDI: ffffffff8afc72c0 [ 327.315752][ T11] RBP: 0000000000000040 R08: ffffffff90da750f R09: 1ffffffff21b4ea1 [ 327.323750][ T11] R10: dffffc0000000000 R11: fffffbfff21b4ea2 R12: 1ffff1100f075274 [ 327.331784][ T11] R13: dffffc0000000000 R14: ffff8880783a93a0 R15: ffff888060584300 [ 327.339791][ T11] ? xfrm_state_fini+0x25c/0x2b0 [ 327.344762][ T11] ? xfrm_state_fini+0x25c/0x2b0 [ 327.349717][ T11] xfrm_net_exit+0x25/0x60 [ 327.354150][ T11] cleanup_net+0x6f4/0xb90 [ 327.358674][ T11] ? ops_free_list+0x3b0/0x3b0 [ 327.363467][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.368681][ T11] ? process_scheduled_works+0x957/0x15b0 [ 327.374421][ T11] ? process_scheduled_works+0x957/0x15b0 [ 327.380161][ T11] process_scheduled_works+0xa45/0x15b0 [ 327.385778][ T11] ? assign_work+0x400/0x400 [ 327.390391][ T11] ? assign_work+0x39e/0x400 [ 327.395003][ T11] worker_thread+0xa55/0xfc0 [ 327.399656][ T11] kthread+0x2fa/0x390 [ 327.403735][ T11] ? pr_cont_work+0x560/0x560 [ 327.408426][ T11] ? kthread_blkcg+0xd0/0xd0 [ 327.413041][ T11] ret_from_fork+0x48/0x80 [ 327.417498][ T11] ? kthread_blkcg+0xd0/0xd0 [ 327.422167][ T11] ret_from_fork_asm+0x11/0x20 [ 327.427061][ T11] [ 327.430454][ T11] Kernel Offset: disabled [ 327.434844][ T11] Rebooting in 86400 seconds..