last executing test programs: 2.822848542s ago: executing program 4 (id=9752): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x38, 0xff, 0x4f, 0x40, 0x13d3, 0x3219, 0x7a67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x1, 0x0, 0x5e, 0x8b, 0x15}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.683216948s ago: executing program 3 (id=9769): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 1.47953815s ago: executing program 3 (id=9774): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x6, 0x0, &(0x7f0000000080)) 1.289750733s ago: executing program 3 (id=9779): r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000040)="00fe0000100aff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) 1.218422563s ago: executing program 1 (id=9780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x50}}, 0x80) 1.165574224s ago: executing program 0 (id=9781): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x109400, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000400)={{0x800, 0x8}, {0x20, 0x3}, 0x5, 0x7}) 1.151611304s ago: executing program 2 (id=9782): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4) 1.098147985s ago: executing program 3 (id=9783): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x2, 0x334, &(0x7f0000002900)="$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") truncate(&(0x7f0000000400)='./file2\x00', 0x100) 1.059577026s ago: executing program 4 (id=9784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004080)=@newtaction={0x8c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x3, 0x1009, 0x0, 0x40, {0x1, 0x0, 0x3, 0xce20, 0x101}, {0x74, 0x2, 0x5d, 0x3, 0xf6, 0x9}, 0x3ff, 0x800}}]]}, {0x4}, {0xfffffffffffffcfc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x80) 965.260377ms ago: executing program 0 (id=9785): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000280)=0x188) 883.245768ms ago: executing program 2 (id=9786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000e080005400000000f2c0000000b0a01080000000000000000010000000900020073797a32000000000900010073797a300000000014000000020a03"], 0xc4}}, 0x0) 882.325768ms ago: executing program 1 (id=9796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x0, 0xb, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x9, 0x1, 'vlan\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) 803.515819ms ago: executing program 3 (id=9787): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000200)="7f00000018002507b9409b14ffff0b7a0204be04050714056406040c5c0005003f0006182a0000000d0085a102000000000000003610648d49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf603000000523250b1eae26d992a38f1c42caee28c5aea", 0x7f, 0x0, 0x0, 0x0) 785.817379ms ago: executing program 0 (id=9788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ed000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 707.21343ms ago: executing program 4 (id=9789): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff4026}]}) eventfd2(0x3, 0x0) 697.284651ms ago: executing program 2 (id=9790): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'macvlan1\x00', &(0x7f0000000300)=@ethtool_cmd={0x15, 0x7, 0x4, 0x8b9, 0xf3, 0x0, 0x7f, 0x9, 0xe, 0x8, 0x5, 0x3, 0x8, 0x7, 0x1, 0x3, [0x0, 0x8]}}) 670.330191ms ago: executing program 1 (id=9791): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x8882) write$sndseq(r0, &(0x7f0000000340)=[{0x5, 0x0, 0x0, 0xfd, @tick, {}, {0x3, 0x81}, @raw32}], 0x1c) 539.315363ms ago: executing program 0 (id=9792): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) 524.359803ms ago: executing program 4 (id=9793): r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{0x27}, {}, {0x100, 0x9}, {0x0, 0x320}, {0x0, 0x4}, {0x2, 0xfffffff9}, {0x0, 0x8}, {0x5b1}], 0x0, 0x5, 0x8, 0x0, 0x6}}) 484.206983ms ago: executing program 1 (id=9794): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x207ffc, 0x92, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000280), 0x0}, 0x20) 431.454774ms ago: executing program 2 (id=9795): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}}, 0x1c) 431.311914ms ago: executing program 3 (id=9797): syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0xfe, 0x15f, &(0x7f0000000200)="$eJzs0M+LEnEYx/H3d+Y7aqRYZCBBKXSxJPAHdYtwIknIBoounQSbSlCMhPKWEt06CF09RF2Xhf0LdPWw7KKX3X9iL94W9ugyM+4uy/of7PO6zef5Pp8H5sXTeUZx7nm79eWr2+m4H9JvnGr57eFoVPLyEHS3LsyD9+MSfEYz1rDogxdPYxYfG03XqLeb3veiBGHAvo6XW0D89J6d0PQ15An2M/dhctt/Z3A5c4tY/t4dDXY8yHLAsnEt6LsZZF7fEWCCUqHVsbsmvyrZ1C0F3WF2c2Pv9Wy38ujhM/d3oTx4EE2a2R/wD1tFdqafDszV1nxWfeVUnXmxUHhSzOUNHu/7hb0B+mX0G7xXoL0+A78vRPKefgc/Ffzxby22VQyY/D12WuGzf937bqZBpYb1WtL6X0vcMDAz2pssWcOfEFk3EkIIIYQQQgghhBBCCCGEEEIIcdWdBAAA///mllHe") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) 339.835685ms ago: executing program 1 (id=9798): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0x3}}}, 0x24}}, 0x20040054) 291.205506ms ago: executing program 0 (id=9799): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@migrate={0x50, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in=@multicast1, @in=@rand_addr=0x64010100, 0x4e22, 0x8001, 0x7, 0x0, 0xa, 0x80, 0x80, 0x3b}, 0x6e6bb3, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) 201.619007ms ago: executing program 2 (id=9800): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, 0x0) 201.551377ms ago: executing program 4 (id=9801): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000140)={0xa, 0x4e20, 0x721, @private0, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@pktinfo={{0x20, 0x29, 0x43, {@loopback}}}], 0x20}, 0x4800) 116.298278ms ago: executing program 1 (id=9802): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@resgid={'resgid', 0x3d, 0xee00}}, {@noload}, {@grpjquota}, {@grpjquota}, {@noinit_itable}, {@noquota}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000740)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 73.943649ms ago: executing program 0 (id=9803): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000080)=0x4c) 9.40534ms ago: executing program 4 (id=9804): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xdb) 0s ago: executing program 2 (id=9805): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) kernel console output (not intermixed with test programs): T4303] usb 1-1: Manufacturer: syz [ 992.296781][ T4303] usb 1-1: SerialNumber: syz [ 992.528658][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 992.536558][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 992.548234][ T4303] hso 1-1:247.141: Not our interface [ 992.575847][ T4303] usb 1-1: USB disconnect, device number 118 [ 992.603873][T22196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7757'. [ 992.782486][T22203] overlayfs: missing 'lowerdir' [ 993.075613][T22213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7763'. [ 993.108995][T22213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7763'. [ 993.466624][T22182] loop3: detected capacity change from 0 to 40427 [ 993.533321][T22182] F2FS-fs (loop3): invalid crc value [ 993.608773][T22182] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 993.847369][T22241] netlink: 'syz.1.7774': attribute type 10 has an invalid length. [ 993.867306][T22182] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 993.909954][T22182] F2FS-fs (loop3): Start checkpoint disabled! [ 993.941212][T22241] team0: Port device wlan1 added [ 993.976478][T22182] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 994.046990][T22182] F2FS-fs (loop3): disabling checkpoint not compatible with read-only [ 994.164917][T22246] loop0: detected capacity change from 0 to 4096 [ 994.233443][T22246] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 994.330048][T22246] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 994.382432][T22246] ntfs3: loop0: mft corrupted [ 994.390686][T22246] ntfs3: loop0: Failed to load $Extend. [ 994.420935][T22254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7780'. [ 994.989713][T22266] netlink: 'syz.4.7785': attribute type 1 has an invalid length. [ 995.067504][T22244] loop2: detected capacity change from 0 to 32768 [ 995.080706][T22266] netlink: 'syz.4.7785': attribute type 2 has an invalid length. [ 995.167217][T22244] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 995.167217][T22244] [ 995.240897][T22272] loop1: detected capacity change from 0 to 256 [ 995.285164][T22272] FAT-fs (loop1): Directory bread(block 1285) failed [ 995.301890][T22272] FAT-fs (loop1): Directory bread(block 1286) failed [ 995.318486][T22272] FAT-fs (loop1): Directory bread(block 1287) failed [ 995.345555][T22272] FAT-fs (loop1): Directory bread(block 1288) failed [ 995.364933][T22272] FAT-fs (loop1): Directory bread(block 1289) failed [ 995.377246][T22272] FAT-fs (loop1): Directory bread(block 1290) failed [ 995.392435][T22272] FAT-fs (loop1): Directory bread(block 1291) failed [ 995.448376][T22272] FAT-fs (loop1): Directory bread(block 1292) failed [ 995.484539][T22272] FAT-fs (loop1): Directory bread(block 1293) failed [ 995.522519][T22272] FAT-fs (loop1): Directory bread(block 1294) failed [ 995.534344][T13849] read_mapping_page failed! [ 995.561504][T13849] ERROR: (device loop2): txCommit: [ 995.561504][T13849] [ 995.579055][T13849] jfs_write_inode: jfs_commit_inode failed! [ 995.649724][T22277] loop4: detected capacity change from 0 to 2048 [ 995.735523][T22279] netlink: 'syz.0.7792': attribute type 4 has an invalid length. [ 995.758072][T22280] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 995.840362][T22277] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 995.924905][T22277] Remounting filesystem read-only [ 995.962570][T22277] NILFS (loop4): error -2 truncating bmap (ino=16) [ 996.156436][ T4252] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 996.335598][T22284] loop0: detected capacity change from 0 to 4096 [ 996.351714][T22291] xt_l2tp: missing protocol rule (udp|l2tpip) [ 996.366297][T22284] __ntfs_error: 7 callbacks suppressed [ 996.366314][T22284] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 996.406162][T22284] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 996.430570][T22284] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 996.478550][T22284] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 996.550671][T22284] ntfs: volume version 3.1. [ 996.578558][T22284] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 996.625620][T22284] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 996.671827][T22284] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 996.786065][T22284] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 996.837149][T22306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7802'. [ 996.864410][T22284] ntfs: (device loop0): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 996.877918][T22306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7802'. [ 997.095290][T22314] loop1: detected capacity change from 0 to 64 [ 997.203863][T22314] hfs: keylen 94 too large [ 997.218657][T22314] hfs: request for non-existent node 1818584064 in B*Tree [ 997.236814][T22314] hfs: request for non-existent node 1818584064 in B*Tree [ 997.305641][T22321] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7811'. [ 997.792911][T22342] loop4: detected capacity change from 0 to 256 [ 997.896207][T22342] FAT-fs (loop4): Directory bread(block 64) failed [ 997.924113][T22342] FAT-fs (loop4): Directory bread(block 65) failed [ 997.969439][T22342] FAT-fs (loop4): Directory bread(block 66) failed [ 997.976428][T22342] FAT-fs (loop4): Directory bread(block 67) failed [ 998.027395][T22342] FAT-fs (loop4): Directory bread(block 68) failed [ 998.034003][T22342] FAT-fs (loop4): Directory bread(block 69) failed [ 998.073689][T22342] FAT-fs (loop4): Directory bread(block 70) failed [ 998.080325][T22342] FAT-fs (loop4): Directory bread(block 71) failed [ 998.107320][T22342] FAT-fs (loop4): Directory bread(block 72) failed [ 998.121544][T22342] FAT-fs (loop4): Directory bread(block 73) failed [ 998.237554][T22355] loop0: detected capacity change from 0 to 1024 [ 998.667882][T22367] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 998.668614][T22359] loop3: detected capacity change from 0 to 4096 [ 999.518353][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7849'. [ 999.518385][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7849'. [ 999.538037][T22401] sctp: [Deprecated]: syz.4.7850 (pid 22401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 999.538037][T22401] Use struct sctp_sack_info instead [ 999.657144][T22403] netlink: 'syz.0.7852': attribute type 10 has an invalid length. [ 999.740644][T22403] team0: Port device wlan1 added [ 1000.118888][T22421] device netdevsim0 entered promiscuous mode [ 1000.140643][T22421] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1000.178338][T22423] loop4: detected capacity change from 0 to 64 [ 1000.360499][T22423] Process accounting resumed [ 1000.378505][T22431] loop3: detected capacity change from 0 to 1024 [ 1000.487656][T22433] loop1: detected capacity change from 0 to 256 [ 1000.552513][T22433] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb080095b, utbl_chksum : 0xe619d30d) [ 1000.580177][T20692] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1000.602438][ T7586] hfsplus: b-tree write err: -5, ino 4 [ 1000.791272][T20692] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.820799][T20692] usb 1-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 1000.844748][T20692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.904022][T20692] usb 1-1: Product: syz [ 1000.916061][T20692] usb 1-1: Manufacturer: syz [ 1000.940589][T20692] usb 1-1: SerialNumber: syz [ 1000.979173][T20692] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input99 [ 1001.035435][T22447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7874'. [ 1001.267856][T22453] loop2: detected capacity change from 0 to 190 [ 1001.324494][T22453] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 1001.385322][T22453] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1001.395267][T22427] loop0: detected capacity change from 0 to 4096 [ 1001.417391][T22427] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1001.446580][T22453] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1001.569540][ T3608] bcm5974 1-1:1.0: could not read from device [ 1001.581028][ T4305] usb 1-1: USB disconnect, device number 119 [ 1001.594971][ T3608] bcm5974 1-1:1.0: could not read from device [ 1001.630217][T14843] bcm5974 1-1:1.0: could not read from device [ 1001.640110][T22453] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 1001.668847][T22453] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 1001.730564][T22453] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1001.746547][T22453] ntfs: (device loop2): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 1001.764155][T22465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7883'. [ 1001.789807][T22453] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1001.844559][T22453] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1001.867875][T22453] ntfs: volume version 3.1. [ 1001.872693][T22453] ntfs: (device loop2): ntfs_read_locked_inode(): Inode is not in use! [ 1001.900067][T22453] syz.2.7877: attempt to access beyond end of device [ 1001.900067][T22453] loop2: rw=0, sector=552, nr_sectors = 8 limit=190 [ 1001.928042][T14843] udevd[14843]: Error opening device "/dev/input/event4": No such file or directory [ 1002.007943][T22453] syz.2.7877: attempt to access beyond end of device [ 1002.007943][T22453] loop2: rw=0, sector=552, nr_sectors = 8 limit=190 [ 1002.034557][T14843] udevd[14843]: Unable to EVIOCGABS device "/dev/input/event4" [ 1002.076438][T14843] udevd[14843]: Unable to EVIOCGABS device "/dev/input/event4" [ 1002.084231][T14843] udevd[14843]: Unable to EVIOCGABS device "/dev/input/event4" [ 1002.095940][T14843] udevd[14843]: Unable to EVIOCGABS device "/dev/input/event4" [ 1002.424553][T22482] sctp: [Deprecated]: syz.4.7891 (pid 22482) Use of int in max_burst socket option. [ 1002.424553][T22482] Use struct sctp_assoc_value instead [ 1002.704066][T22493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7897'. [ 1003.275856][T22516] loop1: detected capacity change from 0 to 256 [ 1003.312488][T22516] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1003.448295][T22516] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 1003.552768][T22524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1004.362816][ T4303] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1004.568381][T22569] loop4: detected capacity change from 0 to 256 [ 1004.593851][ T4303] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1004.606157][T22569] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1004.641767][ T4303] usb 3-1: config 247 has an invalid interface number: 141 but max is 0 [ 1004.676951][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1004.685361][ T4303] usb 3-1: config 247 has no interface number 0 [ 1004.709422][ T4303] usb 3-1: config 247 interface 141 has no altsetting 0 [ 1004.718712][T16773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.727475][T16773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.759160][ T4303] usb 3-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 1004.774596][ T4303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.814838][ T4303] usb 3-1: Product: syz [ 1004.819084][ T4303] usb 3-1: Manufacturer: syz [ 1004.824769][ T4303] usb 3-1: SerialNumber: syz [ 1005.004706][T22579] loop4: detected capacity change from 0 to 64 [ 1005.045055][ T4303] hso 3-1:247.141: Not our interface [ 1005.060095][ T4303] usb 3-1: USB disconnect, device number 115 [ 1005.128294][T22585] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7941'. [ 1005.382980][ T6224] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1005.616776][ T6224] usb 2-1: Using ep0 maxpacket: 16 [ 1005.624366][ T6224] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1005.665189][ T6224] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.686639][ T6224] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1005.718971][ T6224] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1005.766307][ T6224] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1005.810686][ T6224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.848513][ T6224] usb 2-1: Product: syz [ 1005.866038][ T6224] usb 2-1: Manufacturer: syz [ 1005.871036][ T6224] usb 2-1: SerialNumber: syz [ 1005.933560][T22612] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7955'. [ 1005.940468][T22608] loop0: detected capacity change from 0 to 4096 [ 1005.974516][T22614] usb usb8: usbfs: process 22614 (syz.2.7956) did not claim interface 0 before use [ 1006.097778][ T6412] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1006.127521][ T6224] usb 2-1: USB disconnect, device number 109 [ 1006.278461][ T6412] usb 5-1: Using ep0 maxpacket: 32 [ 1006.285620][ T6412] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1006.344507][ T6412] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1006.371645][ T7718] udevd[7718]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1006.389620][ T6412] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1006.434514][ T6412] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1006.470665][ T6412] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1006.519137][ T6412] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1006.566838][ T6412] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1006.583928][ T6412] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1006.604060][ T6412] usb 5-1: Product: syz [ 1006.608296][ T6412] usb 5-1: Manufacturer: syz [ 1006.634085][ T6412] usb 5-1: SerialNumber: syz [ 1006.679593][ T6412] usb 5-1: config 0 descriptor?? [ 1006.724297][ T6412] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1006.787368][ T6412] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1006.932714][T22610] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1006.961358][ T6412] usb 5-1: USB disconnect, device number 114 [ 1007.003587][ T6412] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1007.804757][T22661] loop1: detected capacity change from 0 to 4096 [ 1007.835320][T22644] loop2: detected capacity change from 0 to 32768 [ 1007.894454][T22672] netlink: 'syz.4.7985': attribute type 2 has an invalid length. [ 1007.934316][T22672] netlink: 'syz.4.7985': attribute type 1 has an invalid length. [ 1007.982530][T22672] netlink: 'syz.4.7985': attribute type 1 has an invalid length. [ 1008.069892][ T4253] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 1008.087294][ T4253] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1008.613351][ T4305] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1008.773589][T22696] loop0: detected capacity change from 0 to 64 [ 1008.806188][ T4305] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.841542][ T4305] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.904376][ T4305] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1008.943296][ T4305] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1008.983032][ T4305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.011839][ T4305] usb 5-1: Product: syz [ 1009.022980][ T4305] usb 5-1: Manufacturer: syz [ 1009.032580][ T4305] usb 5-1: SerialNumber: syz [ 1009.069004][ T4305] usb 5-1: selecting invalid altsetting 1 [ 1009.104707][ T4305] usb 5-1: selecting invalid altsetting 0 [ 1009.123889][ T4305] usb 5-1: selecting invalid altsetting 0 [ 1009.148096][ T4305] cdc_ncm 5-1:1.0: bind() failure [ 1009.169627][ T4305] usb 5-1: selecting invalid altsetting 0 [ 1009.188024][ T4305] usbtest: probe of 5-1:1.1 failed with error -22 [ 1009.352361][ T4305] usb 5-1: USB disconnect, device number 115 [ 1009.551622][T22719] loop3: detected capacity change from 0 to 2048 [ 1009.603182][T22719] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1009.655007][T22725] loop0: detected capacity change from 0 to 2048 [ 1009.684071][T22725] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1009.759751][T22725] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1009.773610][ T22] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1009.811414][T22725] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1009.965015][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1009.985529][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1010.003421][ T22] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1010.026510][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.078802][ T22] usb 3-1: config 0 descriptor?? [ 1010.320524][ T22] usb 3-1: USB disconnect, device number 116 [ 1010.372094][T22745] loop0: detected capacity change from 0 to 64 [ 1010.937924][T22758] loop1: detected capacity change from 0 to 8192 [ 1011.013976][T22758] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1011.093558][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1011.100152][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1011.139802][T22758] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1011.196347][T22758] REISERFS (device loop1): using ordered data mode [ 1011.202976][T22758] reiserfs: using flush barriers [ 1011.219543][T22773] loop4: detected capacity change from 0 to 4096 [ 1011.242779][T22758] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1011.292100][T22773] ntfs: volume version 3.1. [ 1011.315992][T22758] REISERFS (device loop1): checking transaction log (loop1) [ 1011.357575][T22758] REISERFS (device loop1): Using r5 hash to sort names [ 1011.374947][T22758] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1011.421180][T22758] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1011.438520][T22773] __ntfs_warning: 13 callbacks suppressed [ 1011.438537][T22773] ntfs: (device loop4): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 1011.558358][T22758] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1011.876284][T22791] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8043'. [ 1011.898646][T22791] unsupported nlmsg_type 40 [ 1012.148887][T22799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8048'. [ 1012.351713][T22805] loop0: detected capacity change from 0 to 1024 [ 1012.375713][T22806] loop3: detected capacity change from 0 to 1764 [ 1012.444525][T22805] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1012.511731][ T4262] EXT4-fs (loop0): unmounting filesystem. [ 1012.541707][T22814] loop4: detected capacity change from 0 to 1024 [ 1012.614219][T22816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8053'. [ 1012.666021][T22816] netlink: 'syz.1.8053': attribute type 1 has an invalid length. [ 1012.760498][T16773] hfsplus: b-tree write err: -5, ino 4 [ 1013.021842][T22822] loop2: detected capacity change from 0 to 4096 [ 1013.077199][T22822] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1013.242035][T22822] ntfs3: loop2: failed to convert "c46c" to macceltic [ 1013.304495][T22839] loop3: detected capacity change from 0 to 16 [ 1013.349814][T22839] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1013.357064][T22840] loop1: detected capacity change from 0 to 1024 [ 1013.361962][ T7718] udevd[7718]: incorrect cramfs checksum on /dev/loop3 [ 1013.518571][T22840] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 1013.606368][T22840] System zones: 0-1, 3-36 [ 1013.619806][T22840] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1013.662338][T22840] EXT4-fs warning (device loop1): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1013.691613][T22840] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1013.694451][T22849] loop0: detected capacity change from 0 to 256 [ 1013.730686][T22840] EXT4-fs error (device loop1): __ext4_iget:5076: inode #12: block 13: comm syz.1.8066: invalid block [ 1013.782786][T22840] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.8066: couldn't read orphan inode 12 (err -117) [ 1013.826181][T22840] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1013.881009][T22840] kAFS: No cell specified [ 1014.121431][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 1014.708331][T22880] loop3: detected capacity change from 0 to 1024 [ 1014.820641][T22880] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1015.009314][T22864] loop1: detected capacity change from 0 to 32768 [ 1015.034223][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 1015.105222][T22864] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1015.327820][T22864] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #131491009 [ 1015.447931][T22864] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1015.528679][T22864] OCFS2: File system is now read-only. [ 1015.550468][T22864] (syz.1.8077,22864,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 1015.617677][T22864] (syz.1.8077,22864,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1015.625664][T22864] (syz.1.8077,22864,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 1015.703070][T22864] (syz.1.8077,22864,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 1015.722155][T22864] (syz.1.8077,22864,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 1015.752120][T22864] (syz.1.8077,22864,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 1015.793765][T22864] (syz.1.8077,22864,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1015.830672][T22917] loop4: detected capacity change from 0 to 1024 [ 1015.831742][T22864] (syz.1.8077,22864,1):ocfs2_mknod:385 ERROR: status = -30 [ 1015.900584][T22864] (syz.1.8077,22864,1):ocfs2_mknod:502 ERROR: status = -30 [ 1015.950873][T22864] (syz.1.8077,22864,1):ocfs2_create:676 ERROR: status = -30 [ 1016.004921][T22919] tmpfs: Bad value for 'mpol' [ 1016.152026][ T4253] ocfs2: Unmounting device (7,1) on (node local) [ 1016.200384][ T56] hfsplus: b-tree write err: -5, ino 4 [ 1016.627301][T22936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8112'. [ 1016.636378][T22936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8112'. [ 1016.708207][T22936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8112'. [ 1017.051507][T22951] loop2: detected capacity change from 0 to 1024 [ 1017.175219][T22957] loop4: detected capacity change from 0 to 64 [ 1017.295556][T16773] hfsplus: b-tree write err: -5, ino 4 [ 1017.325474][T22960] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1017.732730][ T22] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1017.811533][T22975] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1017.921327][ T22] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1017.951801][ T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.004533][ T22] usb 3-1: config 0 has no interface number 0 [ 1018.015499][T22984] xt_ecn: cannot match TCP bits for non-tcp packets [ 1018.039160][ T22] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1018.062628][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.128178][ T22] usb 3-1: Product: syz [ 1018.132412][ T22] usb 3-1: Manufacturer: syz [ 1018.161801][ T22] usb 3-1: SerialNumber: syz [ 1018.204503][ T22] usb 3-1: config 0 descriptor?? [ 1018.310683][T22996] loop0: detected capacity change from 0 to 128 [ 1018.377911][T22996] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1018.424473][ T22] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 1018.430366][T22996] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1018.440832][ T22] usb 3-1: No valid video chain found. [ 1018.642799][ T6412] usb 3-1: USB disconnect, device number 117 [ 1018.737914][T23008] binder: 23007:23008 ioctl c0046209 100000000000000 returned -22 [ 1019.192712][T23025] loop4: detected capacity change from 0 to 16 [ 1019.230537][T23025] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1019.649065][T23034] loop0: detected capacity change from 0 to 4096 [ 1019.665344][T23034] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1019.785057][T23044] loop2: detected capacity change from 0 to 16 [ 1019.830605][T23044] erofs: (device loop2): mounted with root inode @ nid 36. [ 1019.873480][T23034] ntfs3: loop0: failed to convert "c46c" to macceltic [ 1019.881302][T23016] loop3: detected capacity change from 0 to 32768 [ 1019.890350][T23044] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 1019.941981][T23016] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1019.953186][T23044] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 1020.002106][T23044] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1020.043411][T23016] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1020.104413][T23050] loop4: detected capacity change from 0 to 512 [ 1020.523029][ T4255] ocfs2: Unmounting device (7,3) on (node local) [ 1020.578333][T23062] netlink: 112 bytes leftover after parsing attributes in process `syz.2.8171'. [ 1020.622844][ T26] audit: type=1326 audit(23770088.765:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23063 comm="syz.0.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1020.645955][T23062] netlink: 'syz.2.8171': attribute type 1 has an invalid length. [ 1020.721469][ T26] audit: type=1326 audit(23770088.765:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23063 comm="syz.0.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1020.837040][ T26] audit: type=1326 audit(23770088.765:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23063 comm="syz.0.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1020.982678][ T26] audit: type=1326 audit(23770088.765:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23063 comm="syz.0.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1021.081221][ T26] audit: type=1326 audit(23770088.765:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23063 comm="syz.0.8169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1022.283989][T23126] loop3: detected capacity change from 0 to 2048 [ 1022.298916][T23130] netlink: 'syz.4.8201': attribute type 2 has an invalid length. [ 1022.346801][T23130] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8201'. [ 1022.368442][T23133] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1022.462254][T23126] NILFS (loop3): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1022.526902][T23126] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1022.631634][T23126] Remounting filesystem read-only [ 1022.649768][T23126] NILFS (loop3): error -5 truncating bmap (ino=16) [ 1022.804337][T23126] syz.3.8199 (23126) used greatest stack depth: 19848 bytes left [ 1022.813153][ T4255] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 1023.984417][T23195] loop3: detected capacity change from 0 to 8 [ 1024.315923][T23200] loop1: detected capacity change from 0 to 4096 [ 1024.364278][T23200] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 1024.368209][T23207] loop4: detected capacity change from 0 to 256 [ 1024.502744][T23207] FAT-fs (loop4): Directory bread(block 64) failed [ 1024.579343][T23207] FAT-fs (loop4): Directory bread(block 65) failed [ 1024.622721][T23207] FAT-fs (loop4): Directory bread(block 66) failed [ 1024.629327][T23207] FAT-fs (loop4): Directory bread(block 67) failed [ 1024.714129][T23207] FAT-fs (loop4): Directory bread(block 68) failed [ 1024.733906][T23207] FAT-fs (loop4): Directory bread(block 69) failed [ 1024.761395][T23207] FAT-fs (loop4): Directory bread(block 70) failed [ 1024.797586][T23207] FAT-fs (loop4): Directory bread(block 71) failed [ 1024.806967][T23215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8242'. [ 1024.822157][T23207] FAT-fs (loop4): Directory bread(block 72) failed [ 1024.837084][T23215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8242'. [ 1024.856785][T23207] FAT-fs (loop4): Directory bread(block 73) failed [ 1024.876762][T23219] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1026.080465][ T22] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1026.265073][T23269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8268'. [ 1026.272792][ T22] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1026.325704][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.343534][ T22] usb 1-1: config 0 descriptor?? [ 1026.356913][ T22] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1026.744311][ T22] gspca_sn9c2028: read1 error -71 [ 1026.750997][ T22] gspca_sn9c2028: read1 error -71 [ 1026.756156][ T22] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 1026.792748][ T22] usb 1-1: USB disconnect, device number 120 [ 1026.929616][T23256] loop2: detected capacity change from 0 to 32768 [ 1026.937044][T23256] XFS: attr2 mount option is deprecated. [ 1026.980669][T23256] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 1027.003704][T23256] XFS (loop2): Mounting V5 Filesystem [ 1027.155766][T23256] XFS (loop2): Ending clean mount [ 1027.199588][T23256] XFS (loop2): Quotacheck needed: Please wait. [ 1027.308305][T23256] XFS (loop2): Quotacheck: Done. [ 1027.324368][T23302] loop3: detected capacity change from 0 to 4096 [ 1027.429593][T23302] ntfs: volume version 3.1. [ 1027.474184][T23306] x_tables: unsorted underflow at hook 2 [ 1027.545754][ T4269] XFS (loop2): Unmounting Filesystem [ 1028.654520][T23342] xt_limit: Overflow, try lower: 1207959552/384 [ 1028.708159][T23344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8303'. [ 1029.363784][T23360] loop2: detected capacity change from 0 to 1764 [ 1029.525632][T23367] netlink: 'syz.0.8313': attribute type 1 has an invalid length. [ 1029.545973][T23368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8312'. [ 1029.563935][T23367] netlink: 'syz.0.8313': attribute type 2 has an invalid length. [ 1029.579190][T23367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8313'. [ 1030.075154][T23378] loop1: detected capacity change from 0 to 4096 [ 1030.139159][T23384] netlink: 'syz.3.8321': attribute type 21 has an invalid length. [ 1030.152149][T23378] ntfs: volume version 3.1. [ 1030.199012][T23384] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8321'. [ 1030.250994][T23350] Process accounting paused [ 1031.003514][T23406] loop1: detected capacity change from 0 to 2048 [ 1031.074319][T23413] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1031.124076][T23406] NILFS (loop1): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1031.189111][T23406] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1031.245889][T23406] Remounting filesystem read-only [ 1031.254996][T23406] NILFS (loop1): error -5 truncating bmap (ino=16) [ 1031.407976][ T4253] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 1031.585246][T23429] trusted_key: encrypted_key: keyword 'ryptfs' not recognized [ 1032.034355][T23443] loop0: detected capacity change from 0 to 1024 [ 1032.137697][T23443] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1032.427772][ T4262] EXT4-fs (loop0): unmounting filesystem. [ 1032.580637][T23462] usb usb1: usbfs: process 23462 (syz.0.8359) did not claim interface 0 before use [ 1033.276304][T23480] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.8367'. [ 1033.675280][T23492] loop3: detected capacity change from 0 to 2048 [ 1033.700688][T23492] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1033.780151][ T22] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1033.941826][T20692] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1033.965266][ T22] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1033.984646][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.011040][ T22] usb 1-1: Product: syz [ 1034.015262][ T22] usb 1-1: Manufacturer: syz [ 1034.020543][ T22] usb 1-1: SerialNumber: syz [ 1034.046433][ T22] usb 1-1: config 0 descriptor?? [ 1034.134438][T20692] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.151537][T20692] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1034.180361][T20692] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1034.190142][T20692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1034.198173][T20692] usb 2-1: SerialNumber: syz [ 1034.253234][ T22] mos7840 1-1:0.0: required endpoints missing [ 1034.407914][T20692] usb 2-1: 0:2 : does not exist [ 1034.443918][T20692] usb 2-1: USB disconnect, device number 110 [ 1034.459122][T19727] usb 1-1: USB disconnect, device number 121 [ 1034.734238][ T7718] udevd[7718]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1034.920376][T23520] xt_HMARK: spi-set and port-set can't be combined [ 1035.094834][T20692] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1035.297361][T20692] usb 3-1: config 171 has an invalid interface number: 109 but max is 0 [ 1035.311698][T20692] usb 3-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.320289][T23532] loop1: detected capacity change from 0 to 64 [ 1035.337647][T20692] usb 3-1: config 171 has no interface number 0 [ 1035.380177][T20692] usb 3-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1035.425621][T20692] usb 3-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 16384, setting to 64 [ 1035.474520][T20692] usb 3-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1035.547730][T20692] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1035.583275][T20692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.604251][T20692] usb 3-1: Product: syz [ 1035.620212][T20692] usb 3-1: Manufacturer: syz [ 1035.641650][T20692] usb 3-1: SerialNumber: syz [ 1035.677189][T23518] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1035.887184][T20692] ath6kl: Failed to submit usb control message: -71 [ 1035.894609][T20692] ath6kl: unable to send the bmi data to the device: -71 [ 1035.932809][T20692] ath6kl: Unable to send get target info: -71 [ 1035.969322][T20692] ath6kl: Failed to init ath6kl core: -71 [ 1036.074846][T20692] ath6kl_usb: probe of 3-1:171.109 failed with error -71 [ 1036.095231][T20692] usb 3-1: USB disconnect, device number 118 [ 1036.104489][T23551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8403'. [ 1036.181564][T19727] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1036.298190][T23555] tmpfs: Bad value for 'mpol' [ 1036.362951][T19727] usb 5-1: Using ep0 maxpacket: 32 [ 1036.370504][T19727] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 1036.396908][T19727] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.420748][T19727] usb 5-1: config 0 has no interface number 0 [ 1036.436434][T19727] usb 5-1: config 0 interface 200 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1036.505345][T19727] usb 5-1: config 0 interface 200 has no altsetting 0 [ 1036.526528][T19727] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=d3.fc [ 1036.555548][T19727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.573991][T19727] usb 5-1: Product: syz [ 1036.588818][T19727] usb 5-1: Manufacturer: syz [ 1036.600361][T19727] usb 5-1: SerialNumber: syz [ 1036.617050][T19727] usb 5-1: config 0 descriptor?? [ 1036.801941][T23571] loop2: detected capacity change from 0 to 64 [ 1036.852256][T19727] qmi_wwan: probe of 5-1:0.200 failed with error -22 [ 1036.902836][T19727] usb 5-1: USB disconnect, device number 116 [ 1037.158011][T23583] loop3: detected capacity change from 0 to 256 [ 1037.897007][T19727] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1038.096555][T19727] usb 1-1: Using ep0 maxpacket: 16 [ 1038.102474][T23605] loop2: detected capacity change from 0 to 128 [ 1038.113630][T19727] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 1038.142301][T19727] usb 1-1: config 0 has no interface number 0 [ 1038.163277][T23605] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1038.171941][T19727] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1038.190769][T23605] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 1029 (only 1 groups) [ 1038.246456][T19727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.289287][T19727] usb 1-1: Product: syz [ 1038.293530][T19727] usb 1-1: Manufacturer: syz [ 1038.324525][T19727] usb 1-1: SerialNumber: syz [ 1038.346524][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 1038.374312][T19727] usb 1-1: config 0 descriptor?? [ 1038.420037][T19727] hub 1-1:0.145: bad descriptor, ignoring hub [ 1038.447287][T19727] hub: probe of 1-1:0.145 failed with error -5 [ 1038.465558][T19727] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.145/input/input102 [ 1038.473084][ T26] audit: type=1326 audit(23770107.487:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23614 comm="syz.1.8435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eebf8e969 code=0x7ffc0000 [ 1038.554603][ T26] audit: type=1326 audit(23770107.518:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23614 comm="syz.1.8435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f5eebf8e969 code=0x7ffc0000 [ 1038.661013][ T26] audit: type=1326 audit(23770107.518:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23614 comm="syz.1.8435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eebf8e969 code=0x7ffc0000 [ 1038.732868][T23620] netlink: 292 bytes leftover after parsing attributes in process `syz.2.8436'. [ 1038.743714][ T26] audit: type=1326 audit(23770107.529:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23614 comm="syz.1.8435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eebf8e969 code=0x7ffc0000 [ 1039.318945][T23642] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1039.500287][T23645] loop3: detected capacity change from 0 to 2048 [ 1039.598784][T23651] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1039.756719][T23649] loop4: detected capacity change from 0 to 4096 [ 1039.781088][T23655] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8452'. [ 1039.789392][T23649] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1039.900191][T23651] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1039.927824][T23649] ntfs: volume version 3.1. [ 1039.954023][T23651] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1040.055835][T23651] Remounting filesystem read-only [ 1040.079105][ T4255] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 1040.300374][T23665] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1040.790687][T23686] dlm: no locking on control device [ 1040.826800][T23689] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8469'. [ 1041.300905][T23702] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1041.950595][ T6412] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 1042.088706][T23733] netlink: 192 bytes leftover after parsing attributes in process `syz.0.8491'. [ 1042.167893][ T6412] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 1042.181410][ T6412] usb 5-1: config 0 has an invalid interface number: 3 but max is 2 [ 1042.201809][ T6412] usb 5-1: config 0 has no interface number 0 [ 1042.226364][ T6412] usb 5-1: config 0 has no interface number 1 [ 1042.246216][ T6412] usb 5-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 1042.246823][T23739] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.8494'. [ 1042.280096][ T6412] usb 5-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1042.308391][ T6412] usb 5-1: config 0 interface 3 has no altsetting 0 [ 1042.315191][ T6412] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1042.335379][ T6412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.356275][ T6412] usb 5-1: config 0 descriptor?? [ 1042.560742][ T6412] usb 5-1: Could not set interface, error -71 [ 1042.589751][ T6412] usb 5-1: selecting invalid altsetting 0 [ 1042.623397][ T6412] usb 5-1: Could not set interface, error -22 [ 1042.638151][ T6412] usb 5-1: USB disconnect, device number 117 [ 1042.711500][T23747] loop1: detected capacity change from 0 to 64 [ 1042.781655][T23749] loop3: detected capacity change from 0 to 1764 [ 1043.477709][T23768] Unsupported ieee802154 address type: 0 [ 1043.500802][ T4305] usb 1-1: USB disconnect, device number 122 [ 1043.606144][T23774] device netdevsim0 entered promiscuous mode [ 1043.615718][T23773] SET target dimension over the limit! [ 1043.669426][T23774] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1043.804209][T23780] loop1: detected capacity change from 0 to 128 [ 1043.854437][T23780] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1044.199508][T23792] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1044.264898][T23796] loop2: detected capacity change from 0 to 64 [ 1044.751917][T23808] device bond2 entered promiscuous mode [ 1044.954286][T23798] loop3: detected capacity change from 0 to 32768 [ 1045.066218][T23818] __vm_enough_memory: pid: 23818, comm: syz.4.8531, no enough memory for the allocation [ 1045.106442][T23798] XFS (loop3): Mounting V5 Filesystem [ 1045.435582][T23798] XFS (loop3): Ending clean mount [ 1045.465208][ T4305] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1045.673417][ T4255] XFS (loop3): Unmounting Filesystem [ 1045.688548][ T4305] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.723769][ T4305] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 1045.758623][ T4305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.785678][ T4305] usb 3-1: config 0 descriptor?? [ 1045.839705][ T4305] usb 3-1: bad CDC descriptors [ 1045.846026][ T4305] usb 3-1: bad CDC descriptors [ 1045.950200][T23848] xt_bpf: check failed: parse error [ 1046.042419][ T22] usb 3-1: USB disconnect, device number 119 [ 1046.199993][T23852] loop1: detected capacity change from 0 to 164 [ 1046.269911][T23852] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 1046.510381][T23838] loop4: detected capacity change from 0 to 32768 [ 1046.863774][ T6412] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1047.063998][ T6412] usb 4-1: Using ep0 maxpacket: 16 [ 1047.081952][ T6412] usb 4-1: config 1 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 1047.117460][ T6412] usb 4-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1047.169895][ T6412] usb 4-1: config 1 interface 0 altsetting 235 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1047.239066][ T6412] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1047.275276][T23883] loop1: detected capacity change from 0 to 512 [ 1047.285276][ T6412] usb 4-1: New USB device found, idVendor=0525, idProduct=0800, bcdDevice= 0.00 [ 1047.334086][ T6412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.369283][T23883] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1047.398448][ T6412] usb 4-1: Product: syz [ 1047.402691][ T6412] usb 4-1: Manufacturer: syz [ 1047.427104][T23883] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1047.451501][ T6412] usb 4-1: SerialNumber: syz [ 1047.467738][T23883] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1047.482296][T23860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1047.510725][T23883] EXT4-fs warning (device loop1): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1047.520339][ T6412] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1047.525954][T23883] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 1047.571264][T23883] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.8561: bg 0: block 40: padding at end of block bitmap is not set [ 1047.616723][T23883] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1047.636879][ T22] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1047.657176][T23883] EXT4-fs (loop1): 1 truncate cleaned up [ 1047.662891][T23883] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1047.795077][ T6412] usb 4-1: USB disconnect, device number 111 [ 1047.845509][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 1047.853037][ T22] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1047.874910][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 1047.897676][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.942657][ T22] usb 1-1: config 0 has no interface number 0 [ 1047.967868][ T22] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1047.989990][ T22] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1048.010107][ T22] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1048.038988][ T22] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1048.057117][ T22] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1048.092960][ T22] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1048.121613][ T22] usb 1-1: Product: syz [ 1048.125846][ T22] usb 1-1: SerialNumber: syz [ 1048.160054][ T22] usb 1-1: config 0 descriptor?? [ 1048.193588][T23909] SET target dimension over the limit! [ 1048.366082][ T22] input: syz (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input103 [ 1048.366494][T23913] netlink: 'syz.2.8573': attribute type 1 has an invalid length. [ 1048.394485][ T3608] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1048.438777][T23913] netlink: 'syz.2.8573': attribute type 1 has an invalid length. [ 1048.467249][ T3608] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1048.560292][ T3608] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1048.598656][T14842] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1048.611894][ T22] usb 1-1: USB disconnect, device number 123 [ 1048.804992][T23925] loop2: detected capacity change from 0 to 512 [ 1048.887112][T23925] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1048.907761][T23925] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1048.934572][T23925] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1048.960237][T23925] EXT4-fs warning (device loop2): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1049.007691][T23925] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1049.050579][T23925] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.8579: bg 0: block 40: padding at end of block bitmap is not set [ 1049.090352][T23925] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1049.100887][T23925] EXT4-fs (loop2): 1 truncate cleaned up [ 1049.135960][T23925] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1049.307800][T23940] netlink: 'syz.3.8585': attribute type 21 has an invalid length. [ 1049.350977][T23940] netlink: 'syz.3.8585': attribute type 20 has an invalid length. [ 1049.369883][T23940] IPv6: NLM_F_CREATE should be specified when creating new route [ 1049.381432][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 1049.595767][T23950] loop0: detected capacity change from 0 to 512 [ 1049.763832][T23950] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.8591: casefold flag without casefold feature [ 1049.817772][T23950] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.8591: couldn't read orphan inode 15 (err -117) [ 1049.910371][T23950] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1049.983971][T23968] loop3: detected capacity change from 0 to 256 [ 1050.126414][ T4262] EXT4-fs (loop0): unmounting filesystem. [ 1050.307412][T23977] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8604'. [ 1051.257061][T24013] loop1: detected capacity change from 0 to 256 [ 1051.349861][T24013] FAT-fs (loop1): Directory bread(block 64) failed [ 1051.373042][T24013] FAT-fs (loop1): Directory bread(block 65) failed [ 1051.381013][T24013] FAT-fs (loop1): Directory bread(block 66) failed [ 1051.409052][T24013] FAT-fs (loop1): Directory bread(block 67) failed [ 1051.424891][T24013] FAT-fs (loop1): Directory bread(block 68) failed [ 1051.442022][T24013] FAT-fs (loop1): Directory bread(block 69) failed [ 1051.495151][T24013] FAT-fs (loop1): Directory bread(block 70) failed [ 1051.507212][T24013] FAT-fs (loop1): Directory bread(block 71) failed [ 1051.548609][T24013] FAT-fs (loop1): Directory bread(block 72) failed [ 1051.558435][T24013] FAT-fs (loop1): Directory bread(block 73) failed [ 1051.834409][ T26] audit: type=1326 audit(23770121.507:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24030 comm="syz.0.8631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1051.896861][ T26] audit: type=1326 audit(23770121.538:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24030 comm="syz.0.8631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1051.978350][ T26] audit: type=1326 audit(23770121.549:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24030 comm="syz.0.8631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1052.061727][T24040] tmpfs: Bad value for 'mpol' [ 1052.086013][ T26] audit: type=1326 audit(23770121.549:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24030 comm="syz.0.8631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1052.166283][ T26] audit: type=1326 audit(23770121.549:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24030 comm="syz.0.8631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1052.534236][T24057] xt_l2tp: invalid flags combination: 4 [ 1052.562061][ T26] audit: type=1326 audit(23770122.273:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24058 comm="syz.0.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1052.565409][ T26] audit: type=1326 audit(23770122.283:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24058 comm="syz.0.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1052.586975][ C1] vkms_vblank_simulate: vblank timer overrun [ 1052.779211][ T26] audit: type=1326 audit(23770122.357:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24058 comm="syz.0.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1052.779277][T24065] netlink: 'syz.1.8647': attribute type 39 has an invalid length. [ 1052.894701][ T26] audit: type=1326 audit(23770122.357:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24058 comm="syz.0.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1052.902442][T24069] loop2: detected capacity change from 0 to 512 [ 1052.969460][ T26] audit: type=1326 audit(23770122.357:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24058 comm="syz.0.8645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1053.074628][T24069] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 1053.113276][T24069] EXT4-fs warning (device loop2): ext4_enable_quotas:7054: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1053.225533][T24069] EXT4-fs (loop2): mount failed [ 1053.479072][T24092] netlink: 'syz.0.8660': attribute type 6 has an invalid length. [ 1053.515259][T24092] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8660'. [ 1053.795512][T24097] loop3: detected capacity change from 0 to 4096 [ 1053.801229][T24099] loop1: detected capacity change from 0 to 4096 [ 1053.821301][T24097] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 1053.848739][T24099] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1053.876682][T24097] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1053.964334][T24102] loop2: detected capacity change from 0 to 4096 [ 1053.990745][T24102] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1054.004231][T24097] ntfs3: loop3: ino=1b, "file0" The size of extended attributes must not exceed 64KiB [ 1054.124649][T24102] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1054.156428][T24102] ntfs3: loop2: Failed to load $Extend. [ 1054.252407][ T4255] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 1054.443356][T24113] loop3: detected capacity change from 0 to 512 [ 1054.583737][T24113] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1054.831773][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 1054.854730][T24125] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8675'. [ 1054.869919][T24123] netlink: 'syz.2.8674': attribute type 21 has an invalid length. [ 1054.925306][T24123] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8674'. [ 1054.978519][T24123] netlink: 'syz.2.8674': attribute type 4 has an invalid length. [ 1055.028235][T24123] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8674'. [ 1055.502550][T24150] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8684'. [ 1056.581573][T24191] loop2: detected capacity change from 0 to 8 [ 1057.479392][ T22] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1057.707892][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 1057.715479][ T22] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1057.742284][ T22] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 1057.780558][ T22] usb 4-1: config 7 has no interface number 0 [ 1057.812879][ T22] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 1057.841112][ T22] usb 4-1: config 7 interface 187 has no altsetting 0 [ 1057.853248][ T22] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1057.910106][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.945128][ T22] usb 4-1: Product: syz [ 1057.958300][ T22] usb 4-1: Manufacturer: syz [ 1057.977959][ T22] usb 4-1: SerialNumber: syz [ 1057.996376][T24214] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1058.220397][ T22] usb 4-1: Limiting number of CPorts to U8_MAX [ 1058.232263][ T22] usb 4-1: Unknown endpoint type found, address 0x07 [ 1058.239405][ T22] usb 4-1: Not enough endpoints found in device, aborting! [ 1058.385936][ T26] audit: type=1326 audit(23770128.391:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24247 comm="syz.4.8736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35e38e969 code=0x7ffc0000 [ 1058.455752][T20692] usb 4-1: USB disconnect, device number 112 [ 1058.490915][ T26] audit: type=1326 audit(23770128.412:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24247 comm="syz.4.8736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fe35e38e969 code=0x7ffc0000 [ 1058.590449][ T26] audit: type=1326 audit(23770128.412:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24247 comm="syz.4.8736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35e38e969 code=0x7ffc0000 [ 1058.671189][ T26] audit: type=1326 audit(23770128.412:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24247 comm="syz.4.8736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35e38e969 code=0x7ffc0000 [ 1058.819094][T24257] loop1: detected capacity change from 0 to 4096 [ 1058.844649][T24257] ntfs: (device loop1): parse_options(): NLS character set cp862 mft_zone_multiplier=0xfffffffffffffffemft_zone_multipl not found. Using previous one cp950. [ 1058.848176][T24264] loop4: detected capacity change from 0 to 512 [ 1058.921705][T24257] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1058.929120][T24264] EXT4-fs: Ignoring removed nobh option [ 1058.973992][T24257] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1059.066030][T24264] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #3: comm syz.4.8744: corrupted inode contents [ 1059.088003][T24264] EXT4-fs (loop4): Remounting filesystem read-only [ 1059.104695][T24264] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #3: comm syz.4.8744: mark_inode_dirty error [ 1059.157182][T24264] EXT4-fs (loop4): Remounting filesystem read-only [ 1059.164245][T24257] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1059.184182][T24264] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #3: comm syz.4.8744: corrupted inode contents [ 1059.213195][T24257] ntfs: (device loop1): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 1059.241337][T24257] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1059.257099][T24264] EXT4-fs (loop4): Remounting filesystem read-only [ 1059.280139][T24264] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.8744: mark_inode_dirty error [ 1059.300926][T24264] EXT4-fs (loop4): Remounting filesystem read-only [ 1059.308186][T24257] ntfs: volume version 3.1. [ 1059.329432][T24264] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.8744: Failed to acquire dquot type 0 [ 1059.395100][T24264] EXT4-fs (loop4): Remounting filesystem read-only [ 1059.424530][T24264] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #16: comm syz.4.8744: corrupted inode contents [ 1059.453534][T24264] EXT4-fs (loop4): Remounting filesystem read-only [ 1059.460284][T24264] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #16: comm syz.4.8744: mark_inode_dirty error [ 1059.507459][T24264] EXT4-fs (loop4): Remounting filesystem read-only [ 1059.524747][T24264] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #16: comm syz.4.8744: corrupted inode contents [ 1059.533934][T24277] loop2: detected capacity change from 0 to 8192 [ 1059.581932][T24264] EXT4-fs (loop4): Remounting filesystem read-only [ 1059.587008][T24277] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1059.598604][T24264] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.8744: mark_inode_dirty error [ 1059.632952][T24277] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1059.642218][T24277] REISERFS (device loop2): using ordered data mode [ 1059.668810][T24264] EXT4-fs (loop4): Remounting filesystem read-only [ 1059.676699][T24264] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #16: comm syz.4.8744: corrupted inode contents [ 1059.703989][T24277] reiserfs: using flush barriers [ 1059.713502][T24264] EXT4-fs (loop4): Remounting filesystem read-only [ 1059.720462][T24264] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 1059.737849][T24264] EXT4-fs (loop4): Remounting filesystem read-only [ 1059.744322][T24277] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1059.744635][T24264] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #16: comm syz.4.8744: corrupted inode contents [ 1059.804369][T24264] EXT4-fs (loop4): Remounting filesystem read-only [ 1059.810968][T24264] EXT4-fs error (device loop4): ext4_truncate:4312: inode #16: comm syz.4.8744: mark_inode_dirty error [ 1059.822814][T24277] REISERFS (device loop2): checking transaction log (loop2) [ 1059.853019][T24264] EXT4-fs (loop4): Remounting filesystem read-only [ 1059.859660][T24264] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 1059.878846][T24266] loop0: detected capacity change from 0 to 32768 [ 1059.924597][T24264] EXT4-fs (loop4): Remounting filesystem read-only [ 1059.954599][T24264] EXT4-fs (loop4): 1 truncate cleaned up [ 1059.965512][T24264] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1060.016371][T24285] loop3: detected capacity change from 0 to 4096 [ 1060.059541][T24285] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1060.070766][T24266] XFS (loop0): Mounting V5 Filesystem [ 1060.077519][T24264] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #12: block 13: comm syz.4.8744: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 1060.136699][T24264] EXT4-fs (loop4): Remounting filesystem read-only [ 1060.189693][T24264] Process accounting resumed [ 1060.226185][T24277] REISERFS (device loop2): Using tea hash to sort names [ 1060.248055][T24277] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1060.252967][T24266] XFS (loop0): Ending clean mount [ 1060.284585][T24266] XFS (loop0): Quotacheck needed: Please wait. [ 1060.300776][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 1060.370627][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:1: Failed to release dquot type 1 [ 1060.402661][ T11] EXT4-fs (loop4): Remounting filesystem read-only [ 1060.485444][T24266] XFS (loop0): Quotacheck: Done. [ 1060.578487][T24266] XFS: no-recovery mounts must be read-only. [ 1060.703884][ T4262] XFS (loop0): Unmounting Filesystem [ 1060.721109][T24302] loop1: detected capacity change from 0 to 1024 [ 1060.737331][T24302] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1060.954406][T24305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8758'. [ 1060.989736][T24307] loop3: detected capacity change from 0 to 512 [ 1061.063209][T24307] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1061.071272][T24307] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1061.081569][T24307] System zones: 0-1, 15-15, 18-18, 34-34 [ 1061.088590][T24307] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1061.121655][T24311] loop1: detected capacity change from 0 to 128 [ 1061.130234][T24307] EXT4-fs warning (device loop3): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1061.145593][T24307] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1061.260707][T24307] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.8759: bad orphan inode 16 [ 1061.367572][T24307] ext4_test_bit(bit=15, block=18) = 1 [ 1061.373600][T24307] is_bad_inode(inode)=0 [ 1061.378344][T24307] NEXT_ORPHAN(inode)=0 [ 1061.382452][T24307] max_ino=32 [ 1061.385770][T24307] i_nlink=2 [ 1061.422270][T24307] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1061.453626][T24307] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 1061.462040][ T4305] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1061.510049][T24307] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 1061.689632][ T4305] usb 3-1: config 0 has an invalid interface number: 76 but max is 0 [ 1061.710040][ T4305] usb 3-1: config 0 has no interface number 0 [ 1061.716205][ T4305] usb 3-1: too many endpoints for config 0 interface 76 altsetting 133: 31, using maximum allowed: 30 [ 1061.746891][ T4305] usb 3-1: config 0 interface 76 altsetting 133 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1061.767439][ T4305] usb 3-1: config 0 interface 76 altsetting 133 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1061.786401][ T4305] usb 3-1: config 0 interface 76 altsetting 133 has 1 endpoint descriptor, different from the interface descriptor's value: 31 [ 1061.809655][ T4305] usb 3-1: config 0 interface 76 has no altsetting 0 [ 1061.824201][ T4305] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 1061.834701][ T4305] usb 3-1: New USB device strings: Mfr=0, Product=244, SerialNumber=0 [ 1061.835878][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 1061.855895][ T4305] usb 3-1: Product: syz [ 1061.873241][ T4305] usb 3-1: config 0 descriptor?? [ 1061.889061][T24313] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1062.115225][ T4305] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.76/input/input104 [ 1062.320276][ T4305] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1062.374351][T20692] usb 3-1: USB disconnect, device number 120 [ 1062.521990][ T4305] usb 2-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 1062.535821][ T4305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.568050][ T4305] pwc: Logitech ViewPort AV 100 webcam detected. [ 1062.965033][ T4305] pwc: send_video_command error -71 [ 1062.971194][ T4305] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1062.998578][ T4305] Philips webcam: probe of 2-1:127.0 failed with error -71 [ 1063.027012][ T4305] usb 2-1: USB disconnect, device number 111 [ 1063.075516][T24357] netlink: 'syz.2.8782': attribute type 9 has an invalid length. [ 1063.088502][T24357] netlink: 'syz.2.8782': attribute type 6 has an invalid length. [ 1063.120444][T20692] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1063.284685][T24361] loop2: detected capacity change from 0 to 4096 [ 1063.301815][T20692] usb 4-1: Using ep0 maxpacket: 8 [ 1063.308594][T20692] usb 4-1: too many configurations: 158, using maximum allowed: 8 [ 1063.318780][T24361] ntfs3: loop2: ino=3, Correct links count -> 2. [ 1063.330866][T20692] usb 4-1: config 0 has no interfaces? [ 1063.341172][T20692] usb 4-1: config 0 has no interfaces? [ 1063.353294][T20692] usb 4-1: config 0 has no interfaces? [ 1063.384165][T20692] usb 4-1: config 0 has no interfaces? [ 1063.409306][T20692] usb 4-1: config 0 has no interfaces? [ 1063.420033][T20692] usb 4-1: config 0 has no interfaces? [ 1063.438289][T20692] usb 4-1: config 0 has no interfaces? [ 1063.463120][T20692] usb 4-1: config 0 has no interfaces? [ 1063.480574][T20692] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 1063.500302][T20692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=150 [ 1063.519680][T20692] usb 4-1: Product: syz [ 1063.529586][T20692] usb 4-1: Manufacturer: syz [ 1063.550021][T20692] usb 4-1: SerialNumber: syz [ 1063.568789][T20692] r8152-cfgselector 4-1: config 0 descriptor?? [ 1063.612461][T24365] loop4: detected capacity change from 0 to 1024 [ 1063.782164][T24371] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1063.809249][T20692] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1063.884831][T13849] hfsplus: b-tree write err: -5, ino 4 [ 1064.028071][ T4305] usb 4-1: USB disconnect, device number 113 [ 1065.084675][T24418] device xfrm0 entered promiscuous mode [ 1065.660297][T24442] loop2: detected capacity change from 0 to 512 [ 1065.764515][T24446] loop0: detected capacity change from 0 to 256 [ 1065.796379][T24442] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1065.842421][T24442] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz.2.8822: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 1065.885493][T24446] FAT-fs (loop0): Directory bread(block 64) failed [ 1065.915984][T24442] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.8822: couldn't read orphan inode 15 (err -117) [ 1065.938858][T24442] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1065.938937][T24446] FAT-fs (loop0): Directory bread(block 65) failed [ 1065.961278][T24442] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.8822: Directory hole found for htree leaf block 0 [ 1066.036792][T24446] FAT-fs (loop0): Directory bread(block 66) failed [ 1066.043403][T24446] FAT-fs (loop0): Directory bread(block 67) failed [ 1066.079496][T24446] FAT-fs (loop0): Directory bread(block 68) failed [ 1066.093547][T24446] FAT-fs (loop0): Directory bread(block 69) failed [ 1066.097638][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 1066.132698][T24446] FAT-fs (loop0): Directory bread(block 70) failed [ 1066.179955][T24446] FAT-fs (loop0): Directory bread(block 71) failed [ 1066.211080][T24446] FAT-fs (loop0): Directory bread(block 72) failed [ 1066.232267][T24446] FAT-fs (loop0): Directory bread(block 73) failed [ 1066.620790][T24466] loop1: detected capacity change from 0 to 4096 [ 1066.640882][T24466] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1067.271045][T24489] loop4: detected capacity change from 0 to 1024 [ 1067.908853][T24514] loop4: detected capacity change from 0 to 2048 [ 1068.001929][T24514] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1068.114427][T24518] loop2: detected capacity change from 0 to 512 [ 1068.208582][T24518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1068.355492][T24529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8860'. [ 1068.409259][T24529] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8860'. [ 1068.516537][T24531] netlink: 'syz.4.8863': attribute type 10 has an invalid length. [ 1068.559862][T24531] batman_adv: batadv0: Adding interface: wlan0 [ 1068.567143][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 1068.654908][T24531] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1068.755264][T24537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8866'. [ 1068.778019][T24537] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8866'. [ 1068.796741][T24531] batman_adv: batadv0: Interface activated: wlan0 [ 1069.318989][T24557] device bridge2 entered promiscuous mode [ 1069.650051][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1069.656514][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1070.616702][T24599] loop3: detected capacity change from 0 to 256 [ 1070.636257][T24567] loop1: detected capacity change from 0 to 32768 [ 1070.780280][T24607] netlink: 'syz.2.8900': attribute type 30 has an invalid length. [ 1070.789099][T24607] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1070.804749][T24567] XFS (loop1): Mounting V5 Filesystem [ 1070.924670][T24567] XFS (loop1): Ending clean mount [ 1070.932988][T24567] XFS (loop1): Quotacheck needed: Please wait. [ 1071.080668][T24567] XFS (loop1): Quotacheck: Done. [ 1071.092878][T24583] loop4: detected capacity change from 0 to 32768 [ 1071.124223][T24583] [ 1071.124223][T24583] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1071.124223][T24583] [ 1071.143001][T24567] XFS: no-recovery mounts must be read-only. [ 1071.252204][T24583] __jfs_setxattr: xattr_size = 243, new_size = 337 [ 1071.290302][T24621] loop0: detected capacity change from 0 to 128 [ 1071.298300][ T4253] XFS (loop1): Unmounting Filesystem [ 1071.393902][T24621] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1071.422862][T13849] [ 1071.422862][T13849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1071.422862][T13849] [ 1071.443361][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 1071.443379][ T26] audit: type=1800 audit(23770142.096:74): pid=24621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8903" name="file2" dev="loop0" ino=1048623 res=0 errno=0 [ 1071.444327][T24621] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1071.480373][T13849] [ 1071.480373][T13849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1071.480373][T13849] [ 1071.528648][ T4252] [ 1071.528648][ T4252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1071.528648][ T4252] [ 1071.578103][ T107] [ 1071.578103][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1071.578103][ T107] [ 1071.668362][T24621] FAT-fs (loop0): Filesystem has been set read-only [ 1071.675448][ T4252] [ 1071.675448][ T4252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1071.675448][ T4252] [ 1072.428203][T24640] loop3: detected capacity change from 0 to 8192 [ 1072.487627][T24640] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1072.535594][T24640] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1072.544865][T24640] REISERFS (device loop3): using ordered data mode [ 1072.592923][T24640] reiserfs: using flush barriers [ 1072.697488][T24640] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1072.747485][T24640] REISERFS (device loop3): checking transaction log (loop3) [ 1072.924237][T24669] SET target dimension over the limit! [ 1073.037579][T24640] REISERFS (device loop3): Using tea hash to sort names [ 1073.071503][T24640] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1073.211738][T24678] MTD: Couldn't look up '': -22 [ 1073.228724][T24677] IPv6: Can't replace route, no match found [ 1074.098200][ T4305] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1074.223160][T24707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8946'. [ 1074.301373][ T4305] usb 4-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 1074.324729][ T4305] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 1074.355536][ T4305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1074.394990][ T4305] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1074.423997][ T4305] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1074.447011][ T4305] usb 4-1: Product: syz [ 1074.470033][ T4305] usb 4-1: Manufacturer: syz [ 1074.484829][ T4305] usb 4-1: SerialNumber: syz [ 1074.509072][ T4305] usb 4-1: config 0 descriptor?? [ 1074.940890][T24727] loop4: detected capacity change from 0 to 64 [ 1074.945054][ T4305] usb 4-1: USB disconnect, device number 114 [ 1075.036543][T24726] loop0: detected capacity change from 0 to 2048 [ 1075.115146][T24728] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1075.141872][T24726] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=128, inode=18302628885633695744, rec_len=65535, name_len=255 [ 1075.276680][T24726] Remounting filesystem read-only [ 1075.825565][T24692] loop1: detected capacity change from 0 to 65536 [ 1076.013650][T24755] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1076.027608][T24692] XFS (loop1): Mounting V5 Filesystem [ 1076.030573][T24758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8967'. [ 1076.162607][T24692] XFS (loop1): Ending clean mount [ 1076.550009][ T4253] XFS (loop1): Unmounting Filesystem [ 1076.569299][T24778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8974'. [ 1076.768555][T24782] loop2: detected capacity change from 0 to 256 [ 1077.114214][T24792] UBIFS error (pid: 24792): cannot open "", error -22 [ 1077.497367][T24808] program syz.0.8991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1077.579328][T24810] netlink: 'syz.2.8992': attribute type 5 has an invalid length. [ 1077.762551][T24818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8976'. [ 1078.191574][T24834] netlink: 'syz.4.9003': attribute type 2 has an invalid length. [ 1078.284740][T24834] device .*! entered promiscuous mode [ 1078.299057][T24838] loop0: detected capacity change from 0 to 1024 [ 1078.626902][T24849] raw_sendmsg: syz.2.9010 forgot to set AF_INET. Fix it! [ 1078.711720][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1079.195231][T24867] loop1: detected capacity change from 0 to 512 [ 1079.254996][T24867] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1079.306334][T24867] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1079.339409][T24867] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1079.358152][T24867] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1079.381555][T24873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9019'. [ 1079.393581][T24867] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1079.419816][T24867] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e018, mo2=0080] [ 1079.428920][T24867] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1079.436832][T24867] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.9017: bg 0: block 34: padding at end of block bitmap is not set [ 1079.456917][T24867] Quota error (device loop1): write_blk: dquota write failed [ 1079.466566][T24873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9019'. [ 1079.475733][T24873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9019'. [ 1079.481399][T24867] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1079.546044][T24867] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.9017: Failed to acquire dquot type 1 [ 1079.579318][T24867] EXT4-fs (loop1): 1 truncate cleaned up [ 1079.615731][T24879] netlink: 'syz.3.9020': attribute type 10 has an invalid length. [ 1079.626838][T24867] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1079.690661][T24867] EXT4-fs (loop1): unmounting filesystem. [ 1079.761390][T24879] device veth0_vlan left promiscuous mode [ 1079.789805][T24879] device veth0_vlan entered promiscuous mode [ 1079.855089][T24879] team0: Device veth0_vlan failed to register rx_handler [ 1080.012018][T24881] netlink: 'syz.2.9021': attribute type 10 has an invalid length. [ 1080.186505][ T26] audit: type=1326 audit(23770151.257:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24894 comm="syz.0.9029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1080.208622][ C1] vkms_vblank_simulate: vblank timer overrun [ 1080.272513][T24898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9027'. [ 1080.343712][ T26] audit: type=1326 audit(23770151.257:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24894 comm="syz.0.9029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1080.421509][T24903] loop1: detected capacity change from 0 to 512 [ 1080.435270][ T26] audit: type=1326 audit(23770151.278:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24894 comm="syz.0.9029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1080.492807][T24903] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1080.510908][T24906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9033'. [ 1080.550613][ T26] audit: type=1326 audit(23770151.278:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24894 comm="syz.0.9029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1080.635092][ T26] audit: type=1326 audit(23770151.278:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24894 comm="syz.0.9029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b378e969 code=0x7ffc0000 [ 1080.703400][T24903] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1080.797265][T24903] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.9031: corrupted in-inode xattr [ 1080.882635][T24903] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.9031: couldn't read orphan inode 15 (err -117) [ 1080.907008][T24903] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1081.019284][T24926] netlink: 212 bytes leftover after parsing attributes in process `syz.0.9042'. [ 1081.120249][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 1081.597473][ T4305] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1081.843268][ T4305] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1081.864436][ T4305] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.904246][ T4305] usb 2-1: config 0 has no interface number 0 [ 1081.942934][ T4305] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1081.955192][T24956] netlink: 'syz.3.9059': attribute type 3 has an invalid length. [ 1081.972140][T24960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9057'. [ 1081.979792][ T4305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.001587][ T4305] usb 2-1: Product: syz [ 1082.010562][ T4305] usb 2-1: Manufacturer: syz [ 1082.015421][ T4305] usb 2-1: SerialNumber: syz [ 1082.024819][T24960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9057'. [ 1082.032907][ T4305] usb 2-1: config 0 descriptor?? [ 1082.272141][ T4305] usb 2-1: USB disconnect, device number 112 [ 1082.278708][T24968] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1082.448882][T24976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9066'. [ 1082.573982][T24980] netlink: 'syz.4.9069': attribute type 9 has an invalid length. [ 1084.142264][T20692] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1084.332533][T20692] usb 4-1: Using ep0 maxpacket: 16 [ 1084.339597][T20692] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1084.392614][T20692] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1084.437210][T20692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.447371][T25049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9104'. [ 1084.458739][T20692] usb 4-1: Product: syz [ 1084.462958][T20692] usb 4-1: Manufacturer: syz [ 1084.470300][T25045] loop0: detected capacity change from 0 to 2048 [ 1084.483310][T20692] usb 4-1: SerialNumber: syz [ 1084.493264][T25045] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1084.517173][T25049] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9104'. [ 1084.533240][T20692] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1084.577541][T25052] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1084.668941][T25054] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1084.780331][T20692] usb 4-1: USB disconnect, device number 115 [ 1085.442342][T25083] tc_dump_action: action bad kind [ 1085.561872][T20692] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 1085.746177][T20692] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1085.762517][T20692] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.791415][T20692] usb 5-1: config 0 has no interface number 0 [ 1085.797859][T20692] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1085.856881][T20692] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1085.866707][T25068] loop1: detected capacity change from 0 to 32768 [ 1085.881995][T20692] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1085.927537][T20692] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1085.965021][T20692] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1085.984655][T20692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 1085.993517][T20692] usb 5-1: SerialNumber: syz [ 1086.016918][T20692] usb 5-1: config 0 descriptor?? [ 1086.018696][T25068] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1086.167424][T25068] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280 [ 1086.224181][T20692] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1086.247472][T20692] synaptics_usb: probe of 5-1:0.52 failed with error -5 [ 1086.257505][T25068] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1086.277523][T25068] OCFS2: File system is now read-only. [ 1086.305419][T25068] (syz.1.9111,25068,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 1086.333747][T25068] (syz.1.9111,25068,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 1086.356411][T25068] (syz.1.9111,25068,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 1086.378433][T25068] (syz.1.9111,25068,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 1086.445475][T25068] (syz.1.9111,25068,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 1086.456829][T20692] usb 5-1: USB disconnect, device number 118 [ 1086.478704][T25068] (syz.1.9111,25068,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 1086.490396][T25068] (syz.1.9111,25068,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1086.499002][T25068] (syz.1.9111,25068,0):ocfs2_mknod:385 ERROR: status = -30 [ 1086.521003][T25068] (syz.1.9111,25068,0):ocfs2_mknod:502 ERROR: status = -30 [ 1086.528644][T25068] (syz.1.9111,25068,0):ocfs2_create:676 ERROR: status = -30 [ 1086.636287][T25113] loop2: detected capacity change from 0 to 764 [ 1086.668521][ T4253] ocfs2: Unmounting device (7,1) on (node local) [ 1086.679726][T25111] loop0: detected capacity change from 0 to 4096 [ 1086.688015][T25113] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1086.710977][T25111] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1087.116959][ T4262] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 1087.134764][ T4262] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 1087.141441][ T4262] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1087.292465][T25120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.325599][T25120] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 1087.370385][T25126] nft_compat: unsupported protocol 0 [ 1087.381145][T25120] bond0: (slave gre0): Error -95 calling set_mac_address [ 1087.666600][T25136] netlink: 'syz.0.9142': attribute type 1 has an invalid length. [ 1088.204690][T25160] cgroup: subsys name conflicts with all [ 1088.634236][T25177] loop2: detected capacity change from 0 to 1764 [ 1088.770474][T25183] loop1: detected capacity change from 0 to 256 [ 1088.824878][T25183] FAT-fs (loop1): Directory bread(block 64) failed [ 1088.859155][T25183] FAT-fs (loop1): Directory bread(block 65) failed [ 1088.891376][T25183] FAT-fs (loop1): Directory bread(block 66) failed [ 1088.923395][T25183] FAT-fs (loop1): Directory bread(block 67) failed [ 1088.950560][T25183] FAT-fs (loop1): Directory bread(block 68) failed [ 1088.986634][T25190] netlink: 'syz.2.9164': attribute type 5 has an invalid length. [ 1088.994576][T25183] FAT-fs (loop1): Directory bread(block 69) failed [ 1089.001289][T25183] FAT-fs (loop1): Directory bread(block 70) failed [ 1089.030359][T25190] netlink: 'syz.2.9164': attribute type 11 has an invalid length. [ 1089.056536][T25183] FAT-fs (loop1): Directory bread(block 71) failed [ 1089.085053][T25183] FAT-fs (loop1): Directory bread(block 72) failed [ 1089.109372][T25183] FAT-fs (loop1): Directory bread(block 73) failed [ 1089.316402][ T26] audit: type=1800 audit(23770160.838:80): pid=25183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9161" name="file1" dev="loop1" ino=1048625 res=0 errno=0 [ 1089.446883][T25188] Process accounting paused [ 1089.693985][T25206] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9173'. [ 1090.034683][T25219] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 1090.153439][T25221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9178'. [ 1090.202588][T25221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9178'. [ 1090.318689][T25229] loop4: detected capacity change from 0 to 16 [ 1090.536478][T25235] program syz.2.9182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1091.332971][T25229] cramfs: Error -3 while decompressing! [ 1091.368468][T25193] syz.3.9166 (25193): drop_caches: 2 [ 1091.413523][T25229] cramfs: ffffffff96b50568(27)->ffff888050890000(4096) [ 1091.483172][T25229] cramfs: Error -3 while decompressing! [ 1091.489965][T25229] cramfs: ffffffff96b50583(16)->ffff888047baf000(4096) [ 1091.522537][T25229] cramfs: Error -3 while decompressing! [ 1091.569462][T25229] cramfs: ffffffff96b50568(27)->ffff888050890000(4096) [ 1091.597066][ T26] audit: type=1800 audit(23770163.241:81): pid=25229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9180" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 1092.043657][T25277] loop4: detected capacity change from 0 to 4096 [ 1092.115240][T25277] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1092.143538][T25286] netlink: 'syz.2.9202': attribute type 1 has an invalid length. [ 1092.173166][T25277] NILFS (loop4): trying rollback from an earlier position [ 1092.180522][T25286] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9202'. [ 1092.270926][T25277] NILFS (loop4): recovery complete [ 1092.312758][T25290] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1093.010527][T25317] loop2: detected capacity change from 0 to 64 [ 1093.174287][T25321] netlink: 'syz.0.9216': attribute type 21 has an invalid length. [ 1093.203363][T25322] loop1: detected capacity change from 0 to 764 [ 1093.222956][T25321] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9216'. [ 1093.645134][T25289] loop3: detected capacity change from 0 to 32768 [ 1093.807800][T25289] XFS (loop3): Mounting V5 Filesystem [ 1093.873012][T25312] loop4: detected capacity change from 0 to 32768 [ 1093.906305][T25312] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9212 (25312) [ 1093.978033][T25312] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1094.045633][T25289] XFS (loop3): Ending clean mount [ 1094.052388][T25312] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1094.066644][T25289] XFS (loop3): Quotacheck needed: Please wait. [ 1094.082637][T25312] BTRFS info (device loop4): force clearing of disk cache [ 1094.089836][T25312] BTRFS info (device loop4): enabling auto defrag [ 1094.152583][T25289] XFS (loop3): Quotacheck: Done. [ 1094.167218][T25312] BTRFS info (device loop4): max_inline at 0 [ 1094.183475][T25312] BTRFS info (device loop4): enabling disk space caching [ 1094.203002][T25312] BTRFS info (device loop4): disk space caching is enabled [ 1094.392464][ T4255] XFS (loop3): Unmounting Filesystem [ 1094.458057][T25333] loop2: detected capacity change from 0 to 32768 [ 1094.615018][T25370] kAFS: unable to lookup cell '.,' [ 1094.691255][T25312] BTRFS info (device loop4): enabling ssd optimizations [ 1094.701076][T25312] BTRFS info (device loop4): rebuilding free space tree [ 1094.731607][T25312] BTRFS info (device loop4): disabling free space tree [ 1094.756444][T25312] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1094.786377][T25312] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1095.053741][ T4252] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1095.583058][T25394] loop0: detected capacity change from 0 to 1024 [ 1095.636049][T25394] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1095.761212][T25394] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1095.924000][T25404] loop2: detected capacity change from 0 to 256 [ 1095.971440][ T4262] EXT4-fs (loop0): unmounting filesystem. [ 1096.011899][T25404] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 1096.149202][T25407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9246'. [ 1096.376490][T25415] loop4: detected capacity change from 0 to 256 [ 1096.642370][T25423] netlink: 'syz.2.9252': attribute type 3 has an invalid length. [ 1096.676167][T25425] IPv6: Can't replace route, no match found [ 1096.975772][T25435] loop1: detected capacity change from 0 to 1024 [ 1097.094209][T25435] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1097.148688][T25435] hfsplus: filesystem is marked journaled, leaving read-only. [ 1097.298562][T25448] loop0: detected capacity change from 0 to 164 [ 1097.333502][T25450] SET target dimension over the limit! [ 1098.021799][T25475] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1098.103619][T25478] netlink: 'syz.0.9279': attribute type 4 has an invalid length. [ 1098.228286][T25482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9280'. [ 1098.512506][T25490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9285'. [ 1099.318635][T25520] Driver unsupported XDP return value 0 on prog (id 610) dev N/A, expect packet loss! [ 1099.487377][T25526] mmap: syz.3.9304 (25526): VmData 175878144 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 1099.507994][T25528] loop0: detected capacity change from 0 to 256 [ 1099.626811][T25528] FAT-fs (loop0): Directory bread(block 64) failed [ 1099.655802][T25528] FAT-fs (loop0): Directory bread(block 65) failed [ 1099.662497][T25528] FAT-fs (loop0): Directory bread(block 66) failed [ 1099.722533][T25528] FAT-fs (loop0): Directory bread(block 67) failed [ 1099.729228][T25528] FAT-fs (loop0): Directory bread(block 68) failed [ 1099.761512][T25528] FAT-fs (loop0): Directory bread(block 69) failed [ 1099.795066][T25528] FAT-fs (loop0): Directory bread(block 70) failed [ 1099.827494][T25528] FAT-fs (loop0): Directory bread(block 71) failed [ 1099.850060][T25528] FAT-fs (loop0): Directory bread(block 72) failed [ 1099.884375][T25528] FAT-fs (loop0): Directory bread(block 73) failed [ 1100.036572][ T26] audit: type=1800 audit(23770172.088:82): pid=25528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9303" name="file2" dev="loop0" ino=1048628 res=0 errno=0 [ 1100.134585][T25548] netlink: 'syz.1.9313': attribute type 8 has an invalid length. [ 1100.187052][T25548] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.9313'. [ 1100.531131][T25563] loop2: detected capacity change from 0 to 512 [ 1100.556257][T25563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1100.601099][T25563] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.9322: casefold flag without casefold feature [ 1100.632740][T25563] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.9322: couldn't read orphan inode 15 (err -117) [ 1100.674519][T25563] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1100.885760][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 1100.950262][T25579] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1101.686270][T25610] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1101.938845][T25615] netlink: 'syz.3.9345': attribute type 5 has an invalid length. [ 1102.009687][T25619] loop1: detected capacity change from 0 to 256 [ 1102.107529][T25619] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1102.441149][T25629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1102.706918][T25611] loop4: detected capacity change from 0 to 32768 [ 1102.756307][T25611] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9341 (25611) [ 1102.839176][T25611] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1102.858843][T25611] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1102.887669][ T4312] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1102.944204][T25611] BTRFS info (device loop4): enabling auto defrag [ 1102.950765][T25611] BTRFS info (device loop4): force zlib compression, level 3 [ 1102.990793][T25611] BTRFS info (device loop4): disabling auto defrag [ 1103.018009][T25611] BTRFS info (device loop4): enabling auto defrag [ 1103.047519][T25611] BTRFS info (device loop4): max_inline at 0 [ 1103.074511][T25611] BTRFS info (device loop4): using free space tree [ 1103.089920][ T4312] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 1103.108393][ T4312] usb 4-1: config 0 has no interface number 0 [ 1103.137906][ T4312] usb 4-1: config 0 interface 122 has no altsetting 0 [ 1103.164094][ T4312] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1103.165904][T25660] netlink: 'syz.1.9363': attribute type 27 has an invalid length. [ 1103.204004][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.213138][ T4312] usb 4-1: Product: syz [ 1103.217342][ T4312] usb 4-1: Manufacturer: syz [ 1103.229402][ T4312] usb 4-1: SerialNumber: syz [ 1103.244613][ T4312] usb 4-1: config 0 descriptor?? [ 1103.317729][T25611] BTRFS info (device loop4): enabling ssd optimizations [ 1103.535191][ T4252] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1103.687383][ T22] usb 4-1: USB disconnect, device number 116 [ 1103.693810][ T22] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1104.597590][T25717] 9pnet_fd: p9_fd_create_tcp (25717): problem binding to privport [ 1105.201016][T25740] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9396'. [ 1105.508795][T25752] netlink: 'syz.0.9401': attribute type 1 has an invalid length. [ 1105.902593][T25768] netlink: 'syz.2.9410': attribute type 1 has an invalid length. [ 1106.005713][T25764] loop4: detected capacity change from 0 to 4096 [ 1106.137618][T25764] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1106.326169][T25764] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 1106.383483][T25764] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1106.436093][T25764] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.9408: Failed to acquire dquot type 0 [ 1106.688990][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 1107.040732][T25812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9430'. [ 1107.481534][T25831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9440'. [ 1107.539449][T25831] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 1108.115382][T25853] loop1: detected capacity change from 0 to 128 [ 1108.245538][T25853] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 1108.279067][T25853] FAT-fs (loop1): Filesystem has been set read-only [ 1108.369658][T25862] netlink: 'syz.0.9455': attribute type 1 has an invalid length. [ 1108.401585][T25862] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9455'. [ 1108.580822][T25823] loop2: detected capacity change from 0 to 40427 [ 1108.604644][T25823] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1108.643216][T25868] loop0: detected capacity change from 0 to 512 [ 1108.653810][T25823] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1108.692291][T25868] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1108.719940][T25868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1108.733701][T25823] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1108.747815][T25868] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.9458: corrupted in-inode xattr [ 1108.830617][T25868] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.9458: couldn't read orphan inode 15 (err -117) [ 1108.874370][T25868] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1108.938496][T25823] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1108.945612][T25823] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1109.034245][ T4262] EXT4-fs (loop0): unmounting filesystem. [ 1109.547191][T25897] usb usb8: usbfs: process 25897 (syz.4.9471) did not claim interface 0 before use [ 1109.717574][T25901] loop0: detected capacity change from 0 to 2048 [ 1109.834952][T25901] Alternate GPT is invalid, using primary GPT. [ 1109.841379][T25901] loop0: p1 p2 p3 [ 1109.864888][T25907] netlink: 'syz.3.9476': attribute type 9 has an invalid length. [ 1110.268106][T14842] udevd[14842]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 1110.283311][T14843] udevd[14843]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 1110.309238][ T4305] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1110.313943][ T7718] udevd[7718]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1110.519729][ T4305] usb 2-1: Using ep0 maxpacket: 16 [ 1110.529304][ T4305] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1110.566900][ T4305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.595445][ T4305] usb 2-1: Product: syz [ 1110.599679][ T4305] usb 2-1: Manufacturer: syz [ 1110.614312][ T4305] usb 2-1: SerialNumber: syz [ 1110.629641][ T4305] usb 2-1: config 0 descriptor?? [ 1110.644670][ T4305] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 1110.749287][T25928] netlink: 'syz.2.9485': attribute type 1 has an invalid length. [ 1110.770528][T25930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9486'. [ 1110.780074][T25928] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9485'. [ 1110.991136][T25910] loop4: detected capacity change from 0 to 32768 [ 1111.031764][ T4305] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 1111.049718][ T4305] visor: probe of 2-1:0.0 failed with error -71 [ 1111.057067][T25910] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1111.081310][ T4305] usb 2-1: USB disconnect, device number 113 [ 1111.090989][T25910] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280 [ 1111.157278][T25910] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1111.168291][T25910] OCFS2: File system is now read-only. [ 1111.173876][T25910] (syz.4.9478,25910,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 1111.182466][T25940] netlink: 'syz.2.9490': attribute type 2 has an invalid length. [ 1111.194102][T25940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9490'. [ 1111.205103][T25910] (syz.4.9478,25910,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1111.223339][T25910] (syz.4.9478,25910,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 1111.262117][T25910] (syz.4.9478,25910,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 1111.282563][T25910] (syz.4.9478,25910,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 1111.377026][T25910] (syz.4.9478,25910,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 1111.385286][T25910] (syz.4.9478,25910,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1111.481917][T25910] (syz.4.9478,25910,0):ocfs2_mknod:385 ERROR: status = -30 [ 1111.507747][T25910] (syz.4.9478,25910,0):ocfs2_mknod:502 ERROR: status = -30 [ 1111.525308][T25910] (syz.4.9478,25910,0):ocfs2_create:676 ERROR: status = -30 [ 1111.700565][ T4305] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1111.711679][ T4252] ocfs2: Unmounting device (7,4) on (node local) [ 1111.901024][ T4305] usb 3-1: Using ep0 maxpacket: 32 [ 1111.908377][ T4305] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.949865][ T4305] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.006483][ T4305] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1112.060104][ T4305] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1112.119775][ T4305] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1112.139487][ T4305] usb 3-1: Product: syz [ 1112.143724][ T4305] usb 3-1: Manufacturer: syz [ 1112.190773][ T4305] usb 3-1: SerialNumber: syz [ 1112.224594][ T4305] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input106 [ 1112.495861][ T6412] usb 3-1: USB disconnect, device number 121 [ 1112.531357][ T6412] appletouch 3-1:1.0: input: appletouch disconnected [ 1112.636744][T25983] netlink: 'syz.1.9511': attribute type 10 has an invalid length. [ 1112.759816][T25983] device veth0_vlan left promiscuous mode [ 1112.798514][T25983] device veth0_vlan entered promiscuous mode [ 1112.848253][T25983] team0: Device veth0_vlan failed to register rx_handler [ 1113.181485][T25989] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 1113.215359][T25989] bond0: (slave gre0): Error -95 calling set_mac_address [ 1113.341350][T25974] loop0: detected capacity change from 0 to 32768 [ 1113.370305][T25978] loop3: detected capacity change from 0 to 32768 [ 1113.402861][T25974] XFS (loop0): Mounting V5 Filesystem [ 1113.419999][T25978] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1113.469968][T25978] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280 [ 1113.489609][T25978] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1113.500019][T25978] OCFS2: File system is now read-only. [ 1113.506784][T25978] (syz.3.9509,25978,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 1113.517721][T25978] (syz.3.9509,25978,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1113.530817][T25978] (syz.3.9509,25978,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 1113.539802][T25978] (syz.3.9509,25978,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 1113.548875][T25978] (syz.3.9509,25978,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 1113.550622][T25974] XFS (loop0): Ending clean mount [ 1113.557561][T25978] (syz.3.9509,25978,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 1113.571186][T26006] nft_compat: unsupported protocol 0 [ 1113.587564][T25978] (syz.3.9509,25978,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1113.595490][T25978] (syz.3.9509,25978,1):ocfs2_mknod:385 ERROR: status = -30 [ 1113.603625][T25974] XFS (loop0): Quotacheck needed: Please wait. [ 1113.641265][T25978] (syz.3.9509,25978,1):ocfs2_mknod:502 ERROR: status = -30 [ 1113.668603][T25978] (syz.3.9509,25978,1):ocfs2_create:676 ERROR: status = -30 [ 1113.728206][T25974] XFS (loop0): Quotacheck: Done. [ 1113.807878][ T4262] XFS (loop0): Unmounting Filesystem [ 1113.834829][ T4255] ocfs2: Unmounting device (7,3) on (node local) [ 1114.197721][T26016] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1114.430644][T26024] netlink: 'syz.3.9526': attribute type 5 has an invalid length. [ 1114.454878][T26024] netlink: 'syz.3.9526': attribute type 11 has an invalid length. [ 1114.788383][T26036] loop4: detected capacity change from 0 to 256 [ 1114.902435][T26036] FAT-fs (loop4): Directory bread(block 64) failed [ 1114.929172][T26036] FAT-fs (loop4): Directory bread(block 65) failed [ 1114.969002][T26036] FAT-fs (loop4): Directory bread(block 66) failed [ 1114.997782][T26036] FAT-fs (loop4): Directory bread(block 67) failed [ 1115.029032][T26036] FAT-fs (loop4): Directory bread(block 68) failed [ 1115.039845][T26036] FAT-fs (loop4): Directory bread(block 69) failed [ 1115.047945][T26036] FAT-fs (loop4): Directory bread(block 70) failed [ 1115.054538][T26036] FAT-fs (loop4): Directory bread(block 71) failed [ 1115.061779][T26036] FAT-fs (loop4): Directory bread(block 72) failed [ 1115.068806][T26036] FAT-fs (loop4): Directory bread(block 73) failed [ 1115.231238][ T26] audit: type=1800 audit(23770188.039:83): pid=26036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9532" name="file1" dev="loop4" ino=1048631 res=0 errno=0 [ 1115.347045][T26052] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9539'. [ 1115.692803][T26063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9541'. [ 1115.938268][T26063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9541'. [ 1116.342484][T26088] loop2: detected capacity change from 0 to 16 [ 1116.410444][T26088] cramfs: Error -3 while decompressing! [ 1116.437969][T26088] cramfs: ffffffff96b50568(27)->ffff888071bdd000(4096) [ 1116.475913][T26088] cramfs: Error -3 while decompressing! [ 1116.490891][T26088] cramfs: ffffffff96b50583(16)->ffff888044c67000(4096) [ 1116.517360][T26088] cramfs: Error -3 while decompressing! [ 1116.541233][T26088] cramfs: ffffffff96b50568(27)->ffff888071bdd000(4096) [ 1116.563402][ T26] audit: type=1800 audit(23770189.445:84): pid=26088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9555" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 1116.836795][T26104] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1117.420630][T26127] netlink: 'syz.0.9573': attribute type 10 has an invalid length. [ 1117.592385][T26127] device veth0_vlan left promiscuous mode [ 1117.649717][T26127] device veth0_vlan entered promiscuous mode [ 1117.694084][T26127] team0: Device veth0_vlan failed to register rx_handler [ 1118.065637][T26142] loop1: detected capacity change from 0 to 8192 [ 1118.146330][T26142] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1118.162322][T26153] netlink: 'syz.2.9599': attribute type 10 has an invalid length. [ 1118.173602][T26142] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1118.189549][T26150] Process accounting resumed [ 1118.194477][T26142] REISERFS (device loop1): using ordered data mode [ 1118.231020][T26142] reiserfs: using flush barriers [ 1118.260768][T26142] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1118.354971][T26142] REISERFS (device loop1): checking transaction log (loop1) [ 1118.400621][T26142] REISERFS (device loop1): Using r5 hash to sort names [ 1118.432763][T26153] device veth0_vlan left promiscuous mode [ 1118.482476][T26153] device veth0_vlan entered promiscuous mode [ 1118.552425][T26153] team0: Device veth0_vlan failed to register rx_handler [ 1118.757363][T26169] ieee802154 phy0 wpan0: encryption failed: -22 [ 1119.384008][T26157] loop3: detected capacity change from 0 to 40427 [ 1119.429270][T26157] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1119.437069][T26157] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1119.547687][T26157] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1119.744087][T26157] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1119.751328][T26157] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1119.915496][T26199] kAFS: unable to lookup cell '.,' [ 1120.313014][T26211] loop4: detected capacity change from 0 to 1024 [ 1120.330136][T26213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9616'. [ 1120.371127][T26211] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1120.468057][T26211] hfsplus: filesystem is marked journaled, leaving read-only. [ 1121.214038][T26207] loop2: detected capacity change from 0 to 32768 [ 1121.372270][T26229] netlink: 'syz.4.9625': attribute type 10 has an invalid length. [ 1121.402737][T26231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9623'. [ 1121.505359][T26229] device veth0_vlan left promiscuous mode [ 1121.591873][T26229] device veth0_vlan entered promiscuous mode [ 1121.612610][T26229] team0: Device veth0_vlan failed to register rx_handler [ 1121.645096][T26215] syz.1.9618 (26215): drop_caches: 2 [ 1121.679132][T26231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9623'. [ 1121.729274][T26207] XFS (loop2): Mounting V5 Filesystem [ 1121.945459][T26207] XFS (loop2): Ending clean mount [ 1121.981505][T26207] XFS (loop2): Quotacheck needed: Please wait. [ 1122.151854][T26207] XFS (loop2): Quotacheck: Done. [ 1122.396661][ T4269] XFS (loop2): Unmounting Filesystem [ 1122.884060][T26244] loop1: detected capacity change from 0 to 32768 [ 1122.923964][T26268] loop3: detected capacity change from 0 to 1024 [ 1122.942166][T26244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.9627 (26244) [ 1122.974156][T26270] loop4: detected capacity change from 0 to 256 [ 1122.980877][T26268] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1123.038326][T26244] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1123.041713][T26270] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 1123.061126][T26244] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1123.073952][T26274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9642'. [ 1123.100852][T26268] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1123.108248][T26244] BTRFS info (device loop1): force clearing of disk cache [ 1123.211875][T26244] BTRFS info (device loop1): enabling auto defrag [ 1123.227918][T26244] BTRFS info (device loop1): max_inline at 0 [ 1123.251414][ T4255] EXT4-fs (loop3): unmounting filesystem. [ 1123.300457][T26244] BTRFS info (device loop1): enabling disk space caching [ 1123.376027][T26244] BTRFS info (device loop1): disk space caching is enabled [ 1123.447203][T26274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9642'. [ 1123.679542][T26244] BTRFS info (device loop1): enabling ssd optimizations [ 1123.689511][T26244] BTRFS info (device loop1): rebuilding free space tree [ 1123.718501][T26244] BTRFS info (device loop1): disabling free space tree [ 1123.725493][T26244] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1123.757458][T26244] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1123.894461][T26309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1123.994854][ T4253] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1124.080389][T26314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9653'. [ 1124.244771][ T7718] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop1 scanned by udevd (7718) [ 1124.446038][T26325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9659'. [ 1124.548830][T26328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9660'. [ 1124.989970][T26328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9660'. [ 1125.892477][T26368] loop4: detected capacity change from 0 to 256 [ 1125.895127][T26338] loop3: detected capacity change from 0 to 32768 [ 1125.922702][T26338] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 1126.002492][T26368] FAT-fs (loop4): Directory bread(block 64) failed [ 1126.033148][T26368] FAT-fs (loop4): Directory bread(block 65) failed [ 1126.069995][T26368] FAT-fs (loop4): Directory bread(block 66) failed [ 1126.089908][T26368] FAT-fs (loop4): Directory bread(block 67) failed [ 1126.098169][T26373] netlink: 'syz.1.9680': attribute type 5 has an invalid length. [ 1126.098300][T26368] FAT-fs (loop4): Directory bread(block 68) failed [ 1126.124358][T26368] FAT-fs (loop4): Directory bread(block 69) failed [ 1126.167888][T26368] FAT-fs (loop4): Directory bread(block 70) failed [ 1126.176216][T26368] FAT-fs (loop4): Directory bread(block 71) failed [ 1126.194501][T26368] FAT-fs (loop4): Directory bread(block 72) failed [ 1126.201133][T26368] FAT-fs (loop4): Directory bread(block 73) failed [ 1126.383933][ T26] audit: type=1800 audit(23770199.739:85): pid=26368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9678" name="file2" dev="loop4" ino=1048633 res=0 errno=0 [ 1126.386026][T14842] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 1126.574009][T26383] loop2: detected capacity change from 0 to 256 [ 1126.637992][T26383] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1126.790213][T26389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9688'. [ 1126.871440][T26358] loop0: detected capacity change from 0 to 32768 [ 1127.022640][T26358] XFS (loop0): Mounting V5 Filesystem [ 1127.121738][T26406] netlink: 'syz.2.9692': attribute type 5 has an invalid length. [ 1127.187124][T26358] XFS (loop0): Ending clean mount [ 1127.210489][T26358] XFS (loop0): Quotacheck needed: Please wait. [ 1127.328766][T26358] XFS (loop0): Quotacheck: Done. [ 1127.571381][ T4262] XFS (loop0): Unmounting Filesystem [ 1127.737057][T26426] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9700'. [ 1127.839373][T26428] loop4: detected capacity change from 0 to 256 [ 1127.865881][T26428] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1128.188755][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1128.195191][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1128.265557][T26440] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1128.525928][T26450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1129.144398][T26476] netlink: 'syz.4.9727': attribute type 27 has an invalid length. [ 1130.085381][T26515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9757'. [ 1130.371004][T26527] loop2: detected capacity change from 0 to 4096 [ 1130.419423][T26527] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1130.437924][T26527] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 1130.454745][T26527] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1130.487919][T26527] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.9751: Failed to acquire dquot type 0 [ 1130.551721][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 1130.558890][ T4302] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1130.741663][ T4302] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 1130.758871][ T4302] usb 5-1: config 0 has no interface number 0 [ 1130.781782][ T4302] usb 5-1: config 0 interface 122 has no altsetting 0 [ 1130.815821][ T4302] usb 5-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1130.849681][ T4302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.880178][ T4302] usb 5-1: Product: syz [ 1130.897132][ T4302] usb 5-1: Manufacturer: syz [ 1130.914660][ T4302] usb 5-1: SerialNumber: syz [ 1130.943470][ T4302] usb 5-1: config 0 descriptor?? [ 1131.056778][T26523] 9pnet_fd: p9_fd_create_tcp (26523): problem connecting socket to 127.0.0.1 [ 1131.090751][T26554] netlink: 'syz.2.9765': attribute type 32 has an invalid length. [ 1131.298022][T26560] netlink: 'syz.0.9778': attribute type 32 has an invalid length. [ 1131.375761][ T4302] usb 5-1: USB disconnect, device number 119 [ 1131.392499][T26564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9769'. [ 1131.400507][ T4302] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1131.436707][T26564] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 1131.470949][T26566] netlink: 'syz.1.9770': attribute type 5 has an invalid length. [ 1131.492077][T26566] netlink: 7 bytes leftover after parsing attributes in process `syz.1.9770'. [ 1131.820055][T26581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9779'. [ 1132.038487][T26590] loop3: detected capacity change from 0 to 128 [ 1132.088520][T26590] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 1132.121711][T26590] FAT-fs (loop3): Filesystem has been set read-only [ 1132.121751][T26592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9784'. [ 1132.168349][T26592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9784'. [ 1132.409709][T26601] netlink: 'syz.3.9787': attribute type 5 has an invalid length. [ 1132.439548][T26601] netlink: 7 bytes leftover after parsing attributes in process `syz.3.9787'. [ 1132.683631][T26616] loop3: detected capacity change from 0 to 16 [ 1132.742198][T26616] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1133.036206][T26630] loop1: detected capacity change from 0 to 512 [ 1133.059999][T26630] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1133.184911][T26630] ================================================================== [ 1133.193045][T26630] BUG: KASAN: use-after-free in __ext4_iget+0x2b5/0x3cc0 [ 1133.200129][T26630] Read of size 8 at addr ffff88805557c810 by task syz.1.9802/26630 [ 1133.208144][T26630] [ 1133.210494][T26630] CPU: 1 PID: 26630 Comm: syz.1.9802 Not tainted 6.1.139-syzkaller #0 [ 1133.218802][T26630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1133.228890][T26630] Call Trace: [ 1133.232220][T26630] [ 1133.235178][T26630] dump_stack_lvl+0x168/0x22e [ 1133.239897][T26630] ? __lock_acquire+0x7c50/0x7c50 [ 1133.245054][T26630] ? show_regs_print_info+0x12/0x12 [ 1133.250319][T26630] ? load_image+0x3b0/0x3b0 [ 1133.254869][T26630] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1133.260298][T26630] ? __virt_addr_valid+0x188/0x540 [ 1133.265450][T26630] ? __virt_addr_valid+0x465/0x540 [ 1133.270597][T26630] ? __ext4_iget+0x2b5/0x3cc0 [ 1133.275304][T26630] print_report+0xa8/0x220 [ 1133.279748][T26630] kasan_report+0x10b/0x140 [ 1133.284293][T26630] ? __ext4_iget+0x2b5/0x3cc0 [ 1133.288999][T26630] __ext4_iget+0x2b5/0x3cc0 [ 1133.293538][T26630] ? free_unref_page+0x19f/0x3f0 [ 1133.298512][T26630] ? apply_workqueue_attrs+0x180/0x180 [ 1133.304098][T26630] ? ext4_get_projid+0x140/0x140 [ 1133.309151][T26630] ? mb_cache_create+0x42f/0x530 [ 1133.314219][T26630] ext4_fill_super+0x609d/0x80d0 [ 1133.319200][T26630] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1133.325467][T26630] ? snprintf+0xd7/0x120 [ 1133.329742][T26630] ? preempt_count_add+0x8d/0x190 [ 1133.334796][T26630] ? set_blocksize+0x1d3/0x350 [ 1133.339594][T26630] ? sb_set_blocksize+0xa5/0xe0 [ 1133.344492][T26630] get_tree_bdev+0x3f1/0x610 [ 1133.349119][T26630] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1133.355408][T26630] vfs_get_tree+0x88/0x270 [ 1133.359867][T26630] do_new_mount+0x24a/0xa40 [ 1133.364404][T26630] __se_sys_mount+0x2d6/0x3c0 [ 1133.369115][T26630] ? __x64_sys_mount+0xc0/0xc0 [ 1133.373913][T26630] ? lockdep_hardirqs_on+0x94/0x140 [ 1133.379152][T26630] ? __x64_sys_mount+0x1c/0xc0 [ 1133.383948][T26630] do_syscall_64+0x4c/0xa0 [ 1133.388398][T26630] ? clear_bhb_loop+0x60/0xb0 [ 1133.393100][T26630] ? clear_bhb_loop+0x60/0xb0 [ 1133.398239][T26630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.404164][T26630] RIP: 0033:0x7f5eebf9010a [ 1133.408608][T26630] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1133.428256][T26630] RSP: 002b:00007f5eecd82e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1133.436796][T26630] RAX: ffffffffffffffda RBX: 00007f5eecd82ef0 RCX: 00007f5eebf9010a [ 1133.444801][T26630] RDX: 0000200000000000 RSI: 00002000000001c0 RDI: 00007f5eecd82eb0 [ 1133.452927][T26630] RBP: 0000200000000000 R08: 00007f5eecd82ef0 R09: 0000000000000041 [ 1133.460940][T26630] R10: 0000000000000041 R11: 0000000000000246 R12: 00002000000001c0 [ 1133.468960][T26630] R13: 00007f5eecd82eb0 R14: 000000000000050a R15: 0000200000000740 [ 1133.476979][T26630] [ 1133.480032][T26630] [ 1133.482376][T26630] Allocated by task 16840: [ 1133.486819][T26630] kasan_set_track+0x4b/0x70 [ 1133.491446][T26630] __kasan_slab_alloc+0x6b/0x80 [ 1133.496328][T26630] slab_post_alloc_hook+0x4b/0x480 [ 1133.501470][T26630] kmem_cache_alloc_lru+0x11a/0x2e0 [ 1133.506702][T26630] reiserfs_alloc_inode+0x26/0xc0 [ 1133.511767][T26630] iget5_locked+0x9e/0x260 [ 1133.515806][T26639] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 1133.516214][T26630] reiserfs_fill_super+0x116c/0x2340 [ 1133.530738][T26630] mount_bdev+0x287/0x3c0 [ 1133.535113][T26630] legacy_get_tree+0xe6/0x180 [ 1133.539830][T26630] vfs_get_tree+0x88/0x270 [ 1133.544465][T26630] do_new_mount+0x24a/0xa40 [ 1133.549109][T26630] __se_sys_mount+0x2d6/0x3c0 [ 1133.553836][T26630] do_syscall_64+0x4c/0xa0 [ 1133.558298][T26630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.564240][T26630] [ 1133.566604][T26630] Last potentially related work creation: [ 1133.572427][T26630] kasan_save_stack+0x3a/0x60 [ 1133.577161][T26630] __kasan_record_aux_stack+0xb2/0xc0 [ 1133.582649][T26630] call_rcu+0x14b/0x970 [ 1133.586835][T26630] evict+0x7da/0x870 [ 1133.590764][T26630] reiserfs_fill_super+0x13ff/0x2340 [ 1133.596260][T26630] mount_bdev+0x287/0x3c0 [ 1133.600619][T26630] legacy_get_tree+0xe6/0x180 [ 1133.605339][T26630] vfs_get_tree+0x88/0x270 [ 1133.609880][T26630] do_new_mount+0x24a/0xa40 [ 1133.614434][T26630] __se_sys_mount+0x2d6/0x3c0 [ 1133.619322][T26630] do_syscall_64+0x4c/0xa0 [ 1133.623770][T26630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.629710][T26630] [ 1133.632059][T26630] Second to last potentially related work creation: [ 1133.638761][T26630] kasan_save_stack+0x3a/0x60 [ 1133.643519][T26630] __kasan_record_aux_stack+0xb2/0xc0 [ 1133.648917][T26630] call_rcu+0x14b/0x970 [ 1133.653099][T26630] evict+0x7da/0x870 [ 1133.657022][T26630] reiserfs_fill_super+0x13ff/0x2340 [ 1133.662335][T26630] mount_bdev+0x287/0x3c0 [ 1133.666699][T26630] legacy_get_tree+0xe6/0x180 [ 1133.671401][T26630] vfs_get_tree+0x88/0x270 [ 1133.675859][T26630] do_new_mount+0x24a/0xa40 [ 1133.680394][T26630] __se_sys_mount+0x2d6/0x3c0 [ 1133.687294][T26630] do_syscall_64+0x4c/0xa0 [ 1133.691895][T26630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.697850][T26630] [ 1133.700201][T26630] The buggy address belongs to the object at ffff88805557c240 [ 1133.700201][T26630] which belongs to the cache reiser_inode_cache of size 1568 [ 1133.714990][T26630] The buggy address is located 1488 bytes inside of [ 1133.714990][T26630] 1568-byte region [ffff88805557c240, ffff88805557c860) [ 1133.728474][T26630] [ 1133.730820][T26630] The buggy address belongs to the physical page: [ 1133.737346][T26630] page:ffffea0001555e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805557e360 pfn:0x55578 [ 1133.749055][T26630] head:ffffea0001555e00 order:3 compound_mapcount:0 compound_pincount:0 [ 1133.757583][T26630] memcg:ffff888028545c01 [ 1133.761855][T26630] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1133.768387][T26645] loop4: detected capacity change from 0 to 64 [ 1133.769858][T26630] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801aff8280 [ 1133.784621][T26630] raw: ffff88805557e360 000000008013000f 00000001ffffffff ffff888028545c01 [ 1133.793228][T26630] page dumped because: kasan: bad access detected [ 1133.799698][T26630] page_owner tracks the page as allocated [ 1133.805424][T26630] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 6106, tgid 6102 (syz.2.754), ts 174340696946, free_ts 162761676173 [ 1133.829944][T26630] post_alloc_hook+0x173/0x1a0 [ 1133.834732][T26630] get_page_from_freelist+0x1a26/0x1ac0 [ 1133.840378][T26630] __alloc_pages+0x1df/0x4e0 [ 1133.845069][T26630] alloc_slab_page+0x5d/0x160 [ 1133.849756][T26630] new_slab+0x87/0x2c0 [ 1133.853840][T26630] ___slab_alloc+0xbc6/0x1220 [ 1133.858524][T26630] kmem_cache_alloc_lru+0x1ae/0x2e0 [ 1133.863727][T26630] reiserfs_alloc_inode+0x26/0xc0 [ 1133.868751][T26630] iget5_locked+0x9e/0x260 [ 1133.873192][T26630] reiserfs_fill_super+0x116c/0x2340 [ 1133.878563][T26630] mount_bdev+0x287/0x3c0 [ 1133.882900][T26630] legacy_get_tree+0xe6/0x180 [ 1133.887585][T26630] vfs_get_tree+0x88/0x270 [ 1133.892003][T26630] do_new_mount+0x24a/0xa40 [ 1133.896598][T26630] __se_sys_mount+0x2d6/0x3c0 [ 1133.901282][T26630] do_syscall_64+0x4c/0xa0 [ 1133.905704][T26630] page last free stack trace: [ 1133.910373][T26630] free_unref_page_prepare+0x8b4/0x9a0 [ 1133.915842][T26630] free_unref_page+0x2e/0x3f0 [ 1133.920525][T26630] qlist_free_all+0x76/0xe0 [ 1133.925034][T26630] kasan_quarantine_reduce+0x144/0x160 [ 1133.930932][T26630] __kasan_slab_alloc+0x1e/0x80 [ 1133.935796][T26630] slab_post_alloc_hook+0x4b/0x480 [ 1133.940915][T26630] kmem_cache_alloc+0x123/0x2f0 [ 1133.945771][T26630] getname_flags+0xb7/0x500 [ 1133.950283][T26630] do_sys_openat2+0xcf/0x490 [ 1133.954883][T26630] __x64_sys_openat+0x135/0x160 [ 1133.959744][T26630] do_syscall_64+0x4c/0xa0 [ 1133.964175][T26630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.970079][T26630] [ 1133.972428][T26630] Memory state around the buggy address: [ 1133.978059][T26630] ffff88805557c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1133.986133][T26630] ffff88805557c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1133.994249][T26630] >ffff88805557c800: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1134.002332][T26630] ^ [ 1134.006960][T26630] ffff88805557c880: fc fc fc fc fc fc fc fc fc fc fc fc 00 00 00 00 [ 1134.015038][T26630] ffff88805557c900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1134.023107][T26630] ================================================================== [ 1134.031234][ C1] vkms_vblank_simulate: vblank timer overrun [ 1134.201318][T26630] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1134.208591][T26630] CPU: 1 PID: 26630 Comm: syz.1.9802 Not tainted 6.1.139-syzkaller #0 [ 1134.216960][T26630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1134.227053][T26630] Call Trace: [ 1134.230378][T26630] [ 1134.233340][T26630] dump_stack_lvl+0x168/0x22e [ 1134.238068][T26630] ? memcpy+0x3c/0x60 [ 1134.242109][T26630] ? show_regs_print_info+0x12/0x12 [ 1134.247371][T26630] ? load_image+0x3b0/0x3b0 [ 1134.251912][T26630] panic+0x2c9/0x710 [ 1134.255840][T26630] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1134.262021][T26630] ? bpf_jit_dump+0xd0/0xd0 [ 1134.266574][T26630] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 1134.272515][T26630] ? _raw_spin_unlock+0x40/0x40 [ 1134.277444][T26630] check_panic_on_warn+0x80/0xa0 [ 1134.282409][T26630] ? __ext4_iget+0x2b5/0x3cc0 [ 1134.287159][T26630] end_report+0x66/0x110 [ 1134.291444][T26630] kasan_report+0x118/0x140 [ 1134.295993][T26630] ? __ext4_iget+0x2b5/0x3cc0 [ 1134.300713][T26630] __ext4_iget+0x2b5/0x3cc0 [ 1134.305247][T26630] ? free_unref_page+0x19f/0x3f0 [ 1134.310224][T26630] ? apply_workqueue_attrs+0x180/0x180 [ 1134.315714][T26630] ? ext4_get_projid+0x140/0x140 [ 1134.320668][T26630] ? mb_cache_create+0x42f/0x530 [ 1134.325640][T26630] ext4_fill_super+0x609d/0x80d0 [ 1134.330593][T26630] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1134.336851][T26630] ? snprintf+0xd7/0x120 [ 1134.341189][T26630] ? preempt_count_add+0x8d/0x190 [ 1134.346226][T26630] ? set_blocksize+0x1d3/0x350 [ 1134.351091][T26630] ? sb_set_blocksize+0xa5/0xe0 [ 1134.355953][T26630] get_tree_bdev+0x3f1/0x610 [ 1134.360550][T26630] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1134.366794][T26630] vfs_get_tree+0x88/0x270 [ 1134.371220][T26630] do_new_mount+0x24a/0xa40 [ 1134.375729][T26630] __se_sys_mount+0x2d6/0x3c0 [ 1134.380414][T26630] ? __x64_sys_mount+0xc0/0xc0 [ 1134.385198][T26630] ? lockdep_hardirqs_on+0x94/0x140 [ 1134.390409][T26630] ? __x64_sys_mount+0x1c/0xc0 [ 1134.395185][T26630] do_syscall_64+0x4c/0xa0 [ 1134.399620][T26630] ? clear_bhb_loop+0x60/0xb0 [ 1134.404305][T26630] ? clear_bhb_loop+0x60/0xb0 [ 1134.408982][T26630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.414886][T26630] RIP: 0033:0x7f5eebf9010a [ 1134.419309][T26630] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1134.438924][T26630] RSP: 002b:00007f5eecd82e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1134.447695][T26630] RAX: ffffffffffffffda RBX: 00007f5eecd82ef0 RCX: 00007f5eebf9010a [ 1134.455670][T26630] RDX: 0000200000000000 RSI: 00002000000001c0 RDI: 00007f5eecd82eb0 [ 1134.463657][T26630] RBP: 0000200000000000 R08: 00007f5eecd82ef0 R09: 0000000000000041 [ 1134.471631][T26630] R10: 0000000000000041 R11: 0000000000000246 R12: 00002000000001c0 [ 1134.479610][T26630] R13: 00007f5eecd82eb0 R14: 000000000000050a R15: 0000200000000740 [ 1134.487589][T26630] [ 1134.490744][T26630] Kernel Offset: disabled [ 1134.495071][T26630] Rebooting in 86400 seconds..