last executing test programs: 4m5.028870036s ago: executing program 3 (id=519): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 4m4.80280811s ago: executing program 3 (id=524): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) 4m4.536240855s ago: executing program 3 (id=528): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800010, &(0x7f0000001a40)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@nostrict}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@session}, {@gid}, {@lastblock={'lastblock', 0x3d, 0xfffffffffffffffd}}, {@bs={'bs', 0x3d, 0xffffffff00000001}}, {@partition={'partition', 0x3d, 0x1}}, {@unhide}, {}]}, 0x1, 0xc43, &(0x7f00000001c0)="$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") add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) 4m4.072793964s ago: executing program 3 (id=533): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000300)='./bus\x00', 0x800, &(0x7f0000000340)={[{@allow_utime={'allow_utime', 0x3d, 0x80000001}}, {@umask={'umask', 0x3d, 0x2}}, {@time_offset={'time_offset', 0x3d, 0x9}}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@discard}, {@namecase}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@errors_remount}]}, 0x1, 0x1539, &(0x7f0000002ec0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 4m3.494516655s ago: executing program 3 (id=539): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324258, 0x2, @discrete={0x1, 0x401}}) 4m3.017307264s ago: executing program 3 (id=545): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x70bd29, 0x40000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}}, 0x0) 4m2.464567054s ago: executing program 32 (id=545): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x70bd29, 0x40000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}}, 0x0) 1m14.49540075s ago: executing program 1 (id=2667): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fdatasync(0xffffffffffffffff) 1m14.184114905s ago: executing program 1 (id=2670): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xa, {0x0, 0xa88a, 0x7, 0x2}}) 1m13.868085661s ago: executing program 1 (id=2674): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb7, &(0x7f0000000000), &(0x7f0000000280)=0x4) 1m13.595488307s ago: executing program 1 (id=2677): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000240)={[{@map_off}, {@check_strict}, {@cruft}, {@dmode={'dmode', 0x3d, 0x4}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0xff, 0x544, &(0x7f0000001000)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 1m13.167803015s ago: executing program 1 (id=2685): r0 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$damon_contexts(r0, &(0x7f0000000180), 0x5400) 1m12.609679896s ago: executing program 1 (id=2692): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084149, &(0x7f0000000080)) 1m12.171399024s ago: executing program 33 (id=2692): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084149, &(0x7f0000000080)) 4.249455608s ago: executing program 4 (id=3461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d80)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01200000000000000000010000000900010073797a30000000000900030073797a310000000064000000060a010400000000000000000100000008000b40000000003c0004803800f37f0e000100696d6d656469617465000000240002800800014000000000180002801400028008000340fffffffe08000180fffffffc0900010073797a30"], 0xd8}}, 0x10) 3.928949424s ago: executing program 4 (id=3463): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="17000000000000000000000007000000890704ac1414bb0011000000000000000000000001"], 0x30}, 0x0) 3.6438964s ago: executing program 4 (id=3467): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.204730418s ago: executing program 2 (id=3474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) 2.914241534s ago: executing program 2 (id=3478): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000080)=0x8000000, 0x4) 2.677352948s ago: executing program 2 (id=3482): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004, 0x60}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) 2.462999912s ago: executing program 2 (id=3486): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)='./file1\x00') 2.372267994s ago: executing program 4 (id=3487): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 2.04765725s ago: executing program 4 (id=3491): pipe2$watch_queue(&(0x7f0000000780)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f00000007c0)) 1.898772613s ago: executing program 0 (id=3494): r0 = syz_open_dev$video(&(0x7f0000000040), 0x41a4, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x40, "6f2699bf988913927a7f60763318f4d49461aa1a41a0d3264519fee88f3c3a8e"}) 1.802341855s ago: executing program 2 (id=3496): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0x1, 0x6216, &(0x7f000000cb40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300), &(0x7f0000000240)=ANY=[], 0xa9, 0x1) 1.646706978s ago: executing program 4 (id=3497): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.631088028s ago: executing program 0 (id=3498): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, 0x0) 1.611918219s ago: executing program 6 (id=3499): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.421794693s ago: executing program 0 (id=3501): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x80, 0x0, {0x1, 0x0, 0x6, 0x3, 0xca40000}, 0x3}) 1.300660745s ago: executing program 0 (id=3502): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x140f, 0x1, 0x800, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}}, 0x0) 1.246124136s ago: executing program 6 (id=3503): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setuid(0xee01) 1.195263277s ago: executing program 5 (id=3504): syz_mount_image$hfs(&(0x7f0000000580), &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000000, &(0x7f0000000000)={[{@codepage={'codepage', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uid}]}, 0x1, 0x2dd, &(0x7f0000000680)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x41c701, 0x10) 951.468301ms ago: executing program 6 (id=3505): r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1020, 0x1, 0x13, r0, 0x81000000) 910.432342ms ago: executing program 5 (id=3506): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000009c0)="dd9453", 0x0}, 0x50) 781.009654ms ago: executing program 0 (id=3507): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getnexthop={0x20, 0x6a, 0x101, 0x0, 0x0, {0x0, 0x2}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 692.113856ms ago: executing program 6 (id=3508): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000b00)=@ethtool_sset_info={0x38, 0x3, 0x10000}}) 623.382537ms ago: executing program 5 (id=3509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) 469.99885ms ago: executing program 0 (id=3510): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x4, 0x1000, "758085", 0x1, 0xf6}) 414.088292ms ago: executing program 5 (id=3511): personality(0x500006) syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x400, 0x0, 0xbffffffa}, &(0x7f00000003c0), &(0x7f0000000340)) 361.649133ms ago: executing program 6 (id=3512): setresuid(0xee00, 0xee01, 0x0) setreuid(0xffffffffffffffff, 0xee00) 223.097055ms ago: executing program 5 (id=3513): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 130.401267ms ago: executing program 6 (id=3514): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) preadv2(r0, &(0x7f0000000100)=[{&(0x7f0000002480)=""/80, 0x50}], 0x1, 0x3, 0x0, 0x15) 88.038188ms ago: executing program 2 (id=3515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x44, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private0}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x22000810}, 0x8800) 0s ago: executing program 5 (id=3516): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0xe2) kernel console output (not intermixed with test programs): occurred while creating quota [ 238.692886][ T8883] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.1931: Failed to acquire dquot type 0 [ 238.782751][ T8883] EXT4-fs (loop1): 1 truncate cleaned up [ 238.798044][ T8873] loop2: detected capacity change from 0 to 32768 [ 238.830820][ T8883] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 238.976581][ T8883] Quota error (device loop1): write_blk: dquota write failed [ 239.005755][ T8883] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 239.039624][ T8883] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.1931: Failed to acquire dquot type 0 [ 239.278207][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 239.601333][ T8914] loop5: detected capacity change from 0 to 512 [ 239.735264][ T8914] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1935: bg 0: block 248: padding at end of block bitmap is not set [ 239.811854][ T8914] Quota error (device loop5): write_blk: dquota write failed [ 239.842112][ T8914] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 239.887121][ T8914] EXT4-fs error (device loop5): ext4_acquire_dquot:6816: comm syz.5.1935: Failed to acquire dquot type 1 [ 239.986172][ T8914] EXT4-fs (loop5): 1 truncate cleaned up [ 240.020849][ T8914] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 240.087184][ T8914] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.376924][ T5644] EXT4-fs (loop5): unmounting filesystem. [ 240.386623][ T11] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 240.421907][ T11] EXT4-fs error (device loop5): ext4_release_dquot:6852: comm kworker/u4:1: Failed to release dquot type 1 [ 240.888407][ T26] audit: type=1326 audit(1758690146.887:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccce38eec9 code=0x7ffc0000 [ 240.976256][ T26] audit: type=1326 audit(1758690146.887:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8953 comm="syz.0.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccce38eec9 code=0x7ffc0000 [ 241.409465][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1976'. [ 241.438410][ T8976] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1976'. [ 241.479997][ T8976] device vlan0 entered promiscuous mode [ 241.535084][ T8982] loop2: detected capacity change from 0 to 256 [ 241.648009][ T4533] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 241.801293][ T8990] netlink: 'syz.2.1979': attribute type 5 has an invalid length. [ 241.855524][ T4533] usb 2-1: Using ep0 maxpacket: 8 [ 241.864050][ T4533] usb 2-1: unable to get BOS descriptor or descriptor too short [ 241.893587][ T4533] usb 2-1: config 8 has an invalid interface number: 24 but max is 0 [ 241.930868][ T4533] usb 2-1: config 8 has no interface number 0 [ 241.962363][ T4533] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 242.005090][ T8995] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 242.014575][ T4533] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 242.027693][ T8995] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 242.035895][ T4533] usb 2-1: config 8 interface 24 has no altsetting 0 [ 242.058083][ T4533] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 242.090914][ T4533] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.110574][ T4533] usb 2-1: Product: syz [ 242.121900][ T4533] usb 2-1: Manufacturer: syz [ 242.133731][ T4533] usb 2-1: SerialNumber: syz [ 242.161371][ T8974] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 242.435527][ T4533] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 242.488926][ T4533] usb 2-1: USB disconnect, device number 9 [ 242.671678][ T9014] netlink: 'syz.2.1992': attribute type 1 has an invalid length. [ 242.703556][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 242.770034][ T9020] loop0: detected capacity change from 0 to 512 [ 242.771415][ T9017] loop5: detected capacity change from 0 to 1764 [ 242.846710][ T9020] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 242.867915][ T4407] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.874669][ T9020] ext4 filesystem being mounted at /399/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.901091][ T9017] gfs2: Unexpected value for 'discard' [ 242.968577][ T9020] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.1995: invalid size [ 243.009960][ T4533] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 243.146190][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 243.170307][ T9031] loop1: detected capacity change from 0 to 64 [ 243.227075][ T4533] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 243.275409][ T4533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.347839][ T4533] usb 5-1: config 0 descriptor?? [ 243.630094][ T4279] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 243.773640][ T4533] usb 5-1: Cannot set MAC address [ 243.793600][ T4533] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 243.822490][ T9049] tmpfs: Bad value for 'mpol' [ 243.827881][ T4279] usb 3-1: Using ep0 maxpacket: 32 [ 243.835024][ T4279] usb 3-1: config 0 has an invalid interface number: 111 but max is 1 [ 243.845072][ T4533] usb 5-1: USB disconnect, device number 11 [ 243.895445][ T4279] usb 3-1: config 0 has no interface number 1 [ 243.902259][ T4279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 243.957509][ T4279] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 243.995375][ T4279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.003588][ T4279] usb 3-1: Product: syz [ 244.025214][ T4279] usb 3-1: Manufacturer: syz [ 244.030481][ T4279] usb 3-1: SerialNumber: syz [ 244.070409][ T9055] binder: 9054:9055 ioctl 400c620e 0 returned -14 [ 244.078477][ T4279] usb 3-1: config 0 descriptor?? [ 244.292907][ T4279] snd-usb-6fire 3-1:0.111: unable to receive device firmware state. [ 244.311301][ T4279] snd-usb-6fire: probe of 3-1:0.111 failed with error -71 [ 244.334582][ T9065] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 244.357683][ T4279] usb 3-1: USB disconnect, device number 6 [ 244.372375][ T9065] overlayfs: conflicting options: userxattr,redirect_dir=off [ 244.507339][ T9069] netlink: 'syz.1.2017': attribute type 2 has an invalid length. [ 244.712453][ T9075] loop0: detected capacity change from 0 to 2048 [ 244.749841][ T9075] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.079638][ T9088] netlink: 'syz.2.2027': attribute type 1 has an invalid length. [ 245.369527][ T4279] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 245.565295][ T4279] usb 2-1: Using ep0 maxpacket: 16 [ 245.572686][ T4279] usb 2-1: config index 0 descriptor too short (expected 18, got 14) [ 245.596314][ T4279] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 245.649620][ T4279] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 245.692124][ T4279] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 245.775248][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.800360][ T4279] usb 2-1: Product: syz [ 245.810562][ T9117] loop4: detected capacity change from 0 to 8 [ 245.840765][ T4279] usb 2-1: Manufacturer: syz [ 245.861049][ T4279] usb 2-1: SerialNumber: syz [ 245.885997][ T4279] r8152-cfgselector 2-1: config 0 descriptor?? [ 245.934767][ T9120] xt_cgroup: path and classid specified [ 246.056428][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 246.056445][ T26] audit: type=1326 audit(1758690152.057:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.2.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19298eec9 code=0x7ffc0000 [ 246.075515][ T9122] capability: warning: `syz.2.2044' uses 32-bit capabilities (legacy support in use) [ 246.142587][ T4279] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 246.155006][ T26] audit: type=1326 audit(1758690152.077:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.2.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fe19298eec9 code=0x7ffc0000 [ 246.177275][ T9128] netlink: 'syz.4.2046': attribute type 3 has an invalid length. [ 246.205370][ T26] audit: type=1326 audit(1758690152.157:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.2.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19298eec9 code=0x7ffc0000 [ 246.220961][ T9128] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2046'. [ 246.285294][ T26] audit: type=1326 audit(1758690152.157:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.2.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19298eec9 code=0x7ffc0000 [ 246.308762][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.376547][ T4279] usb 2-1: USB disconnect, device number 10 [ 246.793217][ T9146] xt_ecn: cannot match TCP bits for non-tcp packets [ 246.824878][ T9150] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.2058'. [ 246.864050][ T9150] openvswitch: netlink: Flow actions attr not present in new flow. [ 247.422234][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2068'. [ 247.829777][ T9188] loop4: detected capacity change from 0 to 8 [ 247.874346][ T9183] loop0: detected capacity change from 0 to 4096 [ 247.884512][ T9188] cramfs: Error -5 while decompressing! [ 247.905281][ T9188] cramfs: ffffffff96d7a1a8(26)->ffff88804ed1a000(4096) [ 247.922686][ T9188] cramfs: Error -5 while decompressing! [ 247.924621][ T4387] udevd[4387]: incorrect cramfs checksum on /dev/loop4 [ 247.956142][ T9188] cramfs: ffffffff96d7a1c2(26)->ffff88804fa24000(4096) [ 247.994698][ T9188] cramfs: Error -3 while decompressing! [ 248.043910][ T9188] cramfs: ffffffff96d7a1dc(16)->ffff888051c2e000(4096) [ 248.073142][ T4387] udevd[4387]: incorrect cramfs checksum on /dev/loop4 [ 248.081096][ T9188] cramfs: Error -5 while decompressing! [ 248.120922][ T9188] cramfs: ffffffff96d7a1a8(26)->ffff88804ed1a000(4096) [ 248.129988][ T9192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2077'. [ 248.709014][ T9209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2085'. [ 248.742030][ T9203] loop5: detected capacity change from 0 to 4096 [ 248.790133][ T9203] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 248.934376][ T9203] ntfs3: loop5: failed to convert "c46c" to maccyrillic [ 249.170413][ T9185] loop2: detected capacity change from 0 to 32768 [ 249.335670][ T9185] XFS (loop2): Mounting V5 Filesystem [ 249.565466][ T4816] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 249.650309][ T9185] XFS (loop2): Ending clean mount [ 249.761841][ T9245] loop0: detected capacity change from 0 to 512 [ 249.768360][ T4816] usb 2-1: Using ep0 maxpacket: 8 [ 249.775555][ T4816] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 249.817659][ T4283] XFS (loop2): Unmounting Filesystem [ 249.820093][ T4816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 249.824111][ T9245] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 249.864125][ T9245] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 249.885058][ T4816] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 249.916606][ T9245] EXT4-fs (loop0): orphan cleanup on readonly fs [ 249.923977][ T9245] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.2098: bad orphan inode 267 [ 249.926417][ T4816] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.940700][ T9245] EXT4-fs (loop0): Remounting filesystem read-only [ 249.961257][ T9245] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 250.032482][ T4816] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 250.080322][ T4816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.095903][ T4816] usb 2-1: Product: syz [ 250.110620][ T4816] usb 2-1: Manufacturer: syz [ 250.119248][ T9245] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.2098: dx entry: limit 0 != root limit 125 [ 250.139075][ T4816] usb 2-1: SerialNumber: syz [ 250.155280][ T9245] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2098: Corrupt directory, running e2fsck is recommended [ 250.182883][ T9230] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 250.207083][ T4816] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 250.230081][ T9252] loop5: detected capacity change from 0 to 1024 [ 250.234852][ T4816] usbtest 2-1:1.0: Linux user mode ISO test driver [ 250.243713][ T4816] usbtest 2-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 250.264113][ T9252] EXT4-fs: Ignoring removed bh option [ 250.283416][ T9252] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 250.378836][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 250.476647][ T9252] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 250.556747][ T5644] EXT4-fs (loop5): unmounting filesystem. [ 250.599322][ T4533] usb 2-1: USB disconnect, device number 11 [ 251.115468][ T4533] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 251.335249][ T4533] usb 5-1: Using ep0 maxpacket: 16 [ 251.346683][ T4533] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.375408][ T4533] usb 5-1: config 0 has no interface number 0 [ 251.413643][ T9289] loop0: detected capacity change from 0 to 8 [ 251.425962][ T4533] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 251.443681][ T4533] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.474918][ T4533] usb 5-1: Product: syz [ 251.515755][ T4533] usb 5-1: Manufacturer: syz [ 251.520581][ T4533] usb 5-1: SerialNumber: syz [ 251.532859][ T9289] SQUASHFS error: Failed to read block 0x71: -5 [ 251.576537][ T4533] usb 5-1: config 0 descriptor?? [ 251.577732][ T26] audit: type=1800 audit(1758690157.577:77): pid=9289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2118" name="file0" dev="loop0" ino=1 res=0 errno=0 [ 251.793994][ T4533] usb 5-1: selecting invalid altsetting 1 [ 251.808988][ T4533] speedtch 5-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 251.865707][ T4533] speedtch 5-1:0.1: usbatm_usb_probe: bind failed: -22! [ 251.873860][ T4533] speedtch: probe of 5-1:0.1 failed with error -22 [ 251.913922][ T4533] usb 5-1: USB disconnect, device number 12 [ 252.123793][ T9310] loop2: detected capacity change from 0 to 256 [ 252.201066][ T9310] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 252.639899][ T9324] loop4: detected capacity change from 0 to 1764 [ 252.740150][ T9324] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 252.744627][ T9334] netlink: 212168 bytes leftover after parsing attributes in process `syz.5.2140'. [ 252.944214][ T9338] loop0: detected capacity change from 0 to 512 [ 252.981803][ T9334] syz.5.2140 (9334) used greatest stack depth: 18176 bytes left [ 253.002775][ T9338] EXT4-fs: Ignoring removed oldalloc option [ 253.188381][ T9338] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 253.275407][ T9338] ext4 filesystem being mounted at /436/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.414382][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2148'. [ 253.443528][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 254.768978][ T9392] loop1: detected capacity change from 0 to 512 [ 254.797977][ T9359] loop2: detected capacity change from 0 to 32768 [ 254.863722][ T9392] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 254.878272][ T9392] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 254.889959][ T9392] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2167: Corrupt directory, running e2fsck is recommended [ 254.909691][ T9392] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 254.918938][ T9392] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.2167: corrupted in-inode xattr [ 254.926908][ T9359] XFS (loop2): Mounting V5 Filesystem [ 254.938225][ T9392] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2167: couldn't read orphan inode 15 (err -117) [ 254.960669][ T9392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 255.069868][ T9392] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 255.131522][ T9392] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 255.170339][ T9392] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2167: Corrupt directory, running e2fsck is recommended [ 255.185777][ T9359] XFS (loop2): Ending clean mount [ 255.249308][ T9368] loop0: detected capacity change from 0 to 32768 [ 255.352349][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 255.425726][ T4283] XFS (loop2): Unmounting Filesystem [ 255.547991][ T9368] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 255.580008][ T9368] XFS (loop0): Mounting V5 Filesystem [ 255.594309][ T26] audit: type=1326 audit(1758690161.587:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eab78eec9 code=0x7ffc0000 [ 255.695420][ T26] audit: type=1326 audit(1758690161.627:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f3eab78eec9 code=0x7ffc0000 [ 255.719529][ T26] audit: type=1326 audit(1758690161.627:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eab78eec9 code=0x7ffc0000 [ 255.743877][ T26] audit: type=1326 audit(1758690161.627:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9421 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eab78eec9 code=0x7ffc0000 [ 255.798168][ T9368] XFS (loop0): Ending clean mount [ 255.909569][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.929975][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.003191][ T4276] XFS (loop0): Unmounting Filesystem [ 256.649065][ T6931] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 256.815529][ T4270] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 256.855510][ T6931] usb 3-1: Using ep0 maxpacket: 32 [ 256.865517][ T6931] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 256.885205][ T6931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.894088][ T6931] usb 3-1: Product: syz [ 256.898793][ T6931] usb 3-1: Manufacturer: syz [ 256.903526][ T6931] usb 3-1: SerialNumber: syz [ 256.961530][ T6931] usb 3-1: config 0 descriptor?? [ 257.017892][ T4270] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 257.039422][ T4270] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.068590][ T4270] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 257.088688][ T4270] usb 2-1: config 1 has no interface number 0 [ 257.096236][ T4270] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 257.125082][ T4270] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 257.150236][ T4270] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.195260][ T4270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.206790][ T4270] usb 2-1: Product: syz [ 257.214344][ T4270] usb 2-1: Manufacturer: syz [ 257.225370][ T4270] usb 2-1: SerialNumber: syz [ 257.401453][ T6931] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 257.415276][ T6931] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 257.478510][ T4814] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 257.557001][ T6931] peak_usb: probe of 3-1:0.0 failed with error -71 [ 257.587972][ T6931] usb 3-1: USB disconnect, device number 7 [ 257.688088][ T4814] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 257.695805][ T4533] usb 2-1: USB disconnect, device number 12 [ 257.708437][ T4814] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 257.739057][ T4814] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 257.769183][ T4814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.812032][ T4814] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 258.183291][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2200'. [ 258.213096][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2200'. [ 258.231760][ T4814] gspca_sn9c2028: read1 error -71 [ 258.245492][ T4814] gspca_sn9c2028: read1 error -71 [ 258.252246][ T4814] sn9c2028: probe of 5-1:220.0 failed with error -71 [ 258.288357][ T4814] usb 5-1: USB disconnect, device number 13 [ 258.294998][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2200'. [ 258.412467][ T9474] loop5: detected capacity change from 0 to 32768 [ 258.592197][ T9486] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2204'. [ 258.616081][ T9486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.100696][ T9497] loop1: detected capacity change from 0 to 4096 [ 259.115668][ T9502] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 259.159330][ T9497] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 259.219018][ T9497] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 259.277518][ T9506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2214'. [ 259.294424][ T9497] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 259.342741][ T9497] ntfs: volume version 3.1. [ 259.769058][ T4267] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 260.068303][ T9530] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2224'. [ 260.830166][ T9558] loop5: detected capacity change from 0 to 1024 [ 261.061675][ T4301] hfsplus: b-tree write err: -5, ino 4 [ 261.421054][ T9537] loop2: detected capacity change from 0 to 32768 [ 261.544865][ T9537] read_mapping_page failed! [ 261.644672][ T9579] loop4: detected capacity change from 0 to 512 [ 261.794090][ T9579] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 261.892815][ T9590] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 261.903539][ T9579] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz.4.2250: bg 0: bad block bitmap checksum [ 261.904776][ T4814] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 261.936792][ T9579] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Filesystem failed CRC [ 262.057565][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 262.135240][ T4814] usb 2-1: Using ep0 maxpacket: 16 [ 262.144055][ T4814] usb 2-1: config 0 has no interfaces? [ 262.173309][ T4814] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 262.205222][ T4814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.243871][ T9597] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2259'. [ 262.253901][ T4814] usb 2-1: Product: syz [ 262.265294][ T4814] usb 2-1: Manufacturer: syz [ 262.285250][ T4814] usb 2-1: SerialNumber: syz [ 262.297158][ T4814] r8152-cfgselector 2-1: config 0 descriptor?? [ 262.513853][ T4814] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 262.612867][ T9609] x_tables: duplicate underflow at hook 4 [ 262.627272][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'. [ 262.778059][ T4279] usb 2-1: USB disconnect, device number 13 [ 263.905589][ T9619] loop0: detected capacity change from 0 to 40427 [ 264.036904][ T9619] F2FS-fs (loop0): invalid crc value [ 264.061641][ T9655] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2286'. [ 264.124267][ T9619] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 264.424337][ T9619] F2FS-fs (loop0): Start checkpoint disabled! [ 264.545601][ T9619] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 264.583059][ T9669] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2292'. [ 264.623070][ T9669] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2292'. [ 264.909467][ T9679] loop1: detected capacity change from 0 to 256 [ 265.165369][ T4325] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 265.234893][ T9688] loop1: detected capacity change from 0 to 1024 [ 265.385186][ T4325] usb 5-1: Using ep0 maxpacket: 16 [ 265.393096][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 265.441660][ T4325] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 265.471983][ T4325] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 265.494775][ T9] hfsplus: b-tree write err: -5, ino 4 [ 265.506361][ T4325] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 265.545529][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.582607][ T4325] usb 5-1: Product: syz [ 265.595317][ T4325] usb 5-1: Manufacturer: syz [ 265.605452][ T4325] usb 5-1: SerialNumber: syz [ 265.636257][ T4325] usb 5-1: config 0 descriptor?? [ 265.656015][ T9680] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 265.663779][ T9680] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 265.727274][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 265.734412][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 265.743387][ T4325] port100 5-1:0.0: NFC: Could not get supported command types [ 265.906091][ T9708] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 265.983906][ T4533] usb 5-1: USB disconnect, device number 14 [ 266.358219][ T9722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2318'. [ 266.975569][ T9742] netlink: 'syz.4.2328': attribute type 21 has an invalid length. [ 267.015385][ T9742] netlink: 'syz.4.2328': attribute type 1 has an invalid length. [ 267.568744][ T9763] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2339'. [ 267.824250][ T9768] xt_bpf: check failed: parse error [ 268.347899][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2351'. [ 268.378887][ T9788] netlink: 'syz.1.2351': attribute type 1 has an invalid length. [ 268.405435][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2351'. [ 268.964428][ T9812] loop1: detected capacity change from 0 to 128 [ 268.993166][ T9806] loop0: detected capacity change from 0 to 4096 [ 269.051702][ T9806] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 269.363312][ T9821] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 269.533698][ T9818] loop5: detected capacity change from 0 to 4096 [ 269.567023][ T9818] ntfs3: loop5: ino=3, Correct links count -> 2. [ 270.509072][ T9859] mmap: syz.2.2385 (9859) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 270.698948][ T9864] loop1: detected capacity change from 0 to 256 [ 270.770049][ T9868] Cannot find del_set index 2 as target [ 270.798678][ T9864] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 270.995085][ T9864] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 271.025420][ T9864] exFAT-fs (loop1): Filesystem has been set read-only [ 271.288805][ T9880] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2397'. [ 271.530781][ T9889] netlink: 'syz.2.2402': attribute type 21 has an invalid length. [ 271.575478][ T9889] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2402'. [ 271.608962][ T9892] IPv6: sit1: Disabled Multicast RS [ 272.162917][ T9912] netlink: 1020 bytes leftover after parsing attributes in process `syz.0.2413'. [ 272.745556][ T9900] loop2: detected capacity change from 0 to 32768 [ 272.778160][ T9900] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.2407 (9900) [ 272.833060][ T9900] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 272.868007][ T9928] loop4: detected capacity change from 0 to 512 [ 272.877708][ T9900] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 272.902910][ T9900] BTRFS info (device loop2): turning off barriers [ 272.911447][ T9900] BTRFS info (device loop2): enabling ssd optimizations [ 272.942337][ T9900] BTRFS info (device loop2): using spread ssd allocation scheme [ 272.962718][ T9928] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 272.975388][ T9928] ext4 filesystem being mounted at /492/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 273.009960][ T9900] BTRFS info (device loop2): enabling auto defrag [ 273.018295][ T9900] BTRFS info (device loop2): not using ssd optimizations [ 273.033106][ T9900] BTRFS info (device loop2): not using spread ssd allocation scheme [ 273.043644][ T9900] BTRFS info (device loop2): ignoring data csums [ 273.052393][ T9900] BTRFS info (device loop2): force zlib compression, level 3 [ 273.064701][ T9900] BTRFS info (device loop2): enabling ssd optimizations [ 273.072887][ T9900] BTRFS info (device loop2): using spread ssd allocation scheme [ 273.083277][ T9900] BTRFS info (device loop2): using free space tree [ 273.132188][ T9928] Quota error (device loop4): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 273.180355][ T9928] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 273.308084][ T9928] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.2421: Failed to acquire dquot type 0 [ 273.659382][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 273.849294][ T9961] loop1: detected capacity change from 0 to 2048 [ 273.918102][ T9961] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.962280][ T4283] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 274.045696][ T9967] xt_TCPMSS: Only works on TCP SYN packets [ 274.153032][ T9971] netlink: 'syz.0.2432': attribute type 5 has an invalid length. [ 274.188845][ T9971] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2432'. [ 274.683232][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2441'. [ 274.825616][ T9981] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 275.037826][ T9981] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.069290][ T9981] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 275.126950][ T9981] usb 5-1: config 1 has no interface number 0 [ 275.141832][ T9981] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 275.178963][T10000] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 275.183471][ T9981] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.238212][ T9981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.273364][ T9981] usb 5-1: Product: syz [ 275.289610][ T9981] usb 5-1: Manufacturer: syz [ 275.304707][ T9981] usb 5-1: SerialNumber: syz [ 275.344552][ T9981] usb 5-1: selecting invalid altsetting 1 [ 275.387289][T10002] loop2: detected capacity change from 0 to 4096 [ 275.770057][ T9981] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 275.779927][ T9981] cdc_ncm 5-1:1.1: bind() failure [ 275.815713][ T9981] usb 5-1: USB disconnect, device number 15 [ 276.182819][T10017] loop5: detected capacity change from 0 to 4096 [ 276.200007][T10017] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 276.311264][T10017] ntfs3: loop5: failed to convert "c46c" to cp855 [ 276.345298][ T9981] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 276.567115][ T9981] usb 3-1: config 160 has an invalid interface number: 200 but max is 0 [ 276.595786][ T9981] usb 3-1: config 160 has no interface number 0 [ 276.614186][ T9981] usb 3-1: config 160 interface 200 has no altsetting 0 [ 276.667142][ T9981] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 276.722999][ T9981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.745610][ T9981] usb 3-1: Product: syz [ 276.774193][ T9981] usb 3-1: Manufacturer: syz [ 276.785302][ T9981] usb 3-1: SerialNumber: syz [ 276.899858][T10040] loop5: detected capacity change from 0 to 164 [ 276.953222][T10044] xt_hashlimit: overflow, try lower: 5/0 [ 277.028237][ T9981] usb 3-1: MIDIStreaming interface descriptor not found [ 277.151452][ T9981] usb 3-1: USB disconnect, device number 8 [ 277.201307][T10038] loop4: detected capacity change from 0 to 8192 [ 277.220252][ T26] audit: type=1326 audit(1758690183.217:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccce38eec9 code=0x7ffc0000 [ 277.286189][T10038] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 277.289399][ T26] audit: type=1326 audit(1758690183.217:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccce38eec9 code=0x7ffc0000 [ 277.334821][ T26] audit: type=1326 audit(1758690183.267:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fccce38eec9 code=0x7ffc0000 [ 277.363419][ T26] audit: type=1326 audit(1758690183.267:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccce38eec9 code=0x7ffc0000 [ 277.388219][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.405840][T10038] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 277.412433][ T26] audit: type=1326 audit(1758690183.267:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccce38eec9 code=0x7ffc0000 [ 277.473976][T10038] REISERFS (device loop4): using ordered data mode [ 277.536550][T10038] reiserfs: using flush barriers [ 277.601489][T10038] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 277.715360][T10038] REISERFS (device loop4): checking transaction log (loop4) [ 278.043746][T10064] loop0: detected capacity change from 0 to 512 [ 278.093670][T10038] REISERFS (device loop4): Using tea hash to sort names [ 278.118293][T10038] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 278.185392][T10064] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.2476: casefold flag without casefold feature [ 278.276416][T10064] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2476: couldn't read orphan inode 15 (err -117) [ 278.381096][T10064] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 278.572807][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 278.634791][ T4274] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 278.646576][ T4274] Bluetooth: hci1: Injecting HCI hardware error event [ 278.657803][ T48] Bluetooth: hci1: hardware error 0x00 [ 278.692475][T10080] loop1: detected capacity change from 0 to 512 [ 278.730119][T10080] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.797117][T10080] EXT4-fs: Ignoring removed bh option [ 278.827834][ T26] audit: type=1326 audit(1758690184.827:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.5.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0998d8eec9 code=0x7ffc0000 [ 278.853842][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.874143][T10080] EXT4-fs (loop1): orphan cleanup on readonly fs [ 278.884246][ T26] audit: type=1326 audit(1758690184.867:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.5.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f0998d8eec9 code=0x7ffc0000 [ 278.910605][ T26] audit: type=1326 audit(1758690184.907:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.5.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0998d8eec9 code=0x7ffc0000 [ 278.934097][ T26] audit: type=1326 audit(1758690184.907:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.5.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0998d8eec9 code=0x7ffc0000 [ 278.962855][T10080] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.2483: bad orphan inode 14 [ 279.041873][T10080] ext4_test_bit(bit=13, block=18) = 1 [ 279.070531][T10080] is_bad_inode(inode)=0 [ 279.088834][T10080] NEXT_ORPHAN(inode)=0 [ 279.160997][T10080] max_ino=32 [ 279.164496][T10080] i_nlink=1 [ 279.176647][T10095] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 279.203985][T10080] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 279.399152][T10097] netlink: 'syz.4.2491': attribute type 7 has an invalid length. [ 279.476425][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 279.483521][T10101] 9pnet_fd: Insufficient options for proto=fd [ 280.197139][T10084] loop0: detected capacity change from 0 to 32768 [ 280.705289][ T48] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 280.887513][T10140] kernel profiling enabled (shift: 7) [ 281.189500][T10118] loop5: detected capacity change from 0 to 32768 [ 281.325965][T10153] xt_TCPMSS: Only works on TCP SYN packets [ 281.389711][T10118] XFS (loop5): Mounting V5 Filesystem [ 281.479262][T10118] XFS (loop5): Ending clean mount [ 281.529482][T10167] loop2: detected capacity change from 0 to 64 [ 281.568628][ T26] audit: type=1800 audit(1758690187.567:91): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2501" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 281.608186][T10167] MINIX-fs: mounting file system with errors, running fsck is recommended [ 281.726801][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2524'. [ 281.782256][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2524'. [ 281.815645][ T5644] XFS (loop5): Unmounting Filesystem [ 282.118716][T10183] loop1: detected capacity change from 0 to 256 [ 282.130604][T10182] loop4: detected capacity change from 0 to 1024 [ 282.212710][T10183] FAT-fs (loop1): Directory bread(block 64) failed [ 282.256285][T10183] FAT-fs (loop1): Directory bread(block 65) failed [ 282.284889][T10183] FAT-fs (loop1): Directory bread(block 66) failed [ 282.292473][ T26] audit: type=1800 audit(1758690188.287:92): pid=10182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2529" name="file2" dev="loop4" ino=22 res=0 errno=0 [ 282.355592][T10183] FAT-fs (loop1): Directory bread(block 67) failed [ 282.381448][T10183] FAT-fs (loop1): Directory bread(block 68) failed [ 282.432817][T10183] FAT-fs (loop1): Directory bread(block 69) failed [ 282.456890][ T4368] hfsplus: b-tree write err: -5, ino 4 [ 282.485529][T10183] FAT-fs (loop1): Directory bread(block 70) failed [ 282.505375][T10183] FAT-fs (loop1): Directory bread(block 71) failed [ 282.512526][T10183] FAT-fs (loop1): Directory bread(block 72) failed [ 282.588348][T10183] FAT-fs (loop1): Directory bread(block 73) failed [ 282.829508][T10190] loop0: detected capacity change from 0 to 8192 [ 282.855799][T10190] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 282.895508][T10190] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 282.916820][T10200] loop2: detected capacity change from 0 to 1024 [ 282.920612][T10190] REISERFS (device loop0): using ordered data mode [ 282.986320][T10190] reiserfs: using flush barriers [ 283.011045][T10190] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 283.055179][ T4279] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 283.145834][T10190] REISERFS (device loop0): checking transaction log (loop0) [ 283.191293][ T26] audit: type=1326 audit(1758690189.187:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.4.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 283.245182][ T4279] usb 6-1: Using ep0 maxpacket: 8 [ 283.252678][ T4279] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping [ 283.296779][ T26] audit: type=1326 audit(1758690189.187:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.4.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 283.315077][ T4279] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 283.387666][ T4279] usb 6-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 283.404832][ T26] audit: type=1326 audit(1758690189.217:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.4.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 283.454682][ T4279] usb 6-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 283.470948][ T26] audit: type=1326 audit(1758690189.227:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.4.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 283.485324][ T4279] usb 6-1: Product: syz [ 283.530461][T10190] REISERFS (device loop0): Using tea hash to sort names [ 283.550656][ T4279] usb 6-1: Manufacturer: syz [ 283.555986][T10190] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 283.575613][ T4279] usb 6-1: SerialNumber: syz [ 283.626189][ T4279] usb 6-1: config 0 descriptor?? [ 283.667955][ T4279] smsusb:smsusb_probe: board id=2, interface number 0 [ 283.690886][ T4279] smsusb:smsusb_probe: Device initialized with return code -19 [ 283.936328][ T4279] usb 6-1: USB disconnect, device number 6 [ 284.344597][T10221] loop4: detected capacity change from 0 to 4096 [ 284.363526][T10221] __ntfs_warning: 1 callbacks suppressed [ 284.363543][T10221] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 284.467783][T10204] loop1: detected capacity change from 0 to 32768 [ 284.472537][T10221] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 284.542473][T10221] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 284.561982][T10221] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 284.566144][T10204] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 284.606604][T10221] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 284.678303][T10204] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 284.765437][T10221] ntfs: volume version 3.1. [ 284.799605][T10221] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota. [ 284.824631][T10221] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 284.945743][ T4279] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 285.003015][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 285.061321][T10235] loop2: detected capacity change from 0 to 4096 [ 285.170389][ T4279] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 285.200737][ T4279] usb 1-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 285.257017][ T4279] usb 1-1: Product: syz [ 285.263719][ T4279] usb 1-1: Manufacturer: syz [ 285.301582][ T4279] usb 1-1: SerialNumber: syz [ 285.355468][ T4279] usb 1-1: config 0 descriptor?? [ 285.390498][ T4279] ch341 1-1:0.0: ch341-uart converter detected [ 285.814789][ T4279] usb 1-1: failed to send control message: -71 [ 285.825347][ T4279] ch341-uart: probe of ttyUSB0 failed with error -71 [ 285.864755][T10255] loop4: detected capacity change from 0 to 65 [ 285.880284][ T4279] usb 1-1: USB disconnect, device number 9 [ 285.908795][ T4279] ch341 1-1:0.0: device disconnected [ 285.917478][T10255] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 285.943973][T10257] loop1: detected capacity change from 0 to 256 [ 286.405079][T10265] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2568'. [ 286.540325][T10269] loop0: detected capacity change from 0 to 256 [ 286.686492][T10269] FAT-fs (loop0): Directory bread(block 64) failed [ 286.694388][T10269] FAT-fs (loop0): Directory bread(block 65) failed [ 286.752731][T10269] FAT-fs (loop0): Directory bread(block 66) failed [ 286.770950][T10273] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2572'. [ 286.804886][T10269] FAT-fs (loop0): Directory bread(block 67) failed [ 286.818480][T10269] FAT-fs (loop0): Directory bread(block 68) failed [ 286.835553][T10277] kAFS: unparsable volume name [ 286.845711][T10269] FAT-fs (loop0): Directory bread(block 69) failed [ 286.874059][T10269] FAT-fs (loop0): Directory bread(block 70) failed [ 286.914277][T10251] loop5: detected capacity change from 0 to 32768 [ 286.915760][T10269] FAT-fs (loop0): Directory bread(block 71) failed [ 286.981349][T10269] FAT-fs (loop0): Directory bread(block 72) failed [ 287.023610][T10269] FAT-fs (loop0): Directory bread(block 73) failed [ 287.479105][T10291] loop4: detected capacity change from 0 to 256 [ 287.640444][ T52] block nbd0: Attempted send on invalid socket [ 287.647397][ T52] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.671962][T10295] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 287.853317][T10299] loop5: detected capacity change from 0 to 128 [ 287.920945][T10299] FAT-fs (loop5): Directory bread(block 11554) failed [ 287.957093][T10299] FAT-fs (loop5): Directory bread(block 11555) failed [ 288.020544][T10299] FAT-fs (loop5): Directory bread(block 11556) failed [ 288.052987][T10299] FAT-fs (loop5): Directory bread(block 11557) failed [ 288.072677][T10299] FAT-fs (loop5): Directory bread(block 11558) failed [ 288.125285][T10299] FAT-fs (loop5): Directory bread(block 11559) failed [ 288.132519][T10299] FAT-fs (loop5): Directory bread(block 11560) failed [ 288.204501][T10299] FAT-fs (loop5): Directory bread(block 11561) failed [ 288.226327][T10299] FAT-fs (loop5): Directory bread(block 11562) failed [ 288.249578][T10312] loop1: detected capacity change from 0 to 512 [ 288.256592][T10299] FAT-fs (loop5): Directory bread(block 11563) failed [ 288.332990][T10312] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 288.343906][T10312] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.363975][T10312] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 288.374827][T10307] loop4: detected capacity change from 0 to 8192 [ 288.375895][T10312] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 288.392780][T10312] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.2590: Failed to acquire dquot type 0 [ 288.455751][T10307] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 288.507227][T10307] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 288.517181][T10307] REISERFS (device loop4): using ordered data mode [ 288.524602][T10307] reiserfs: using flush barriers [ 288.579145][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 288.592094][T10307] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 288.610022][T10307] REISERFS (device loop4): checking transaction log (loop4) [ 288.663338][T10307] REISERFS (device loop4): Using r5 hash to sort names [ 288.716320][T10307] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 288.732357][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2594'. [ 288.800409][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2594'. [ 288.807473][T10325] loop5: detected capacity change from 0 to 512 [ 288.848053][T10307] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ÿî§<< G4š¶mÿ±â½ÆuÆÌëê0º‰wÆ2ÝK×]<ýÌàÈŒÏðÿD|ÙÊÞÔ«öWgéÛ½{XA¨Î>®\µ«ý}O´LqQÞ·¸ùχ [ 288.848053][T10307] ðOÉQ±•Çý6ÿÛÐb" [ 288.883798][T10325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.920482][T10325] EXT4-fs: Ignoring removed i_version option [ 289.062720][T10325] EXT4-fs (loop5): 1 orphan inode deleted [ 289.106302][T10325] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 289.167796][ T26] audit: type=1326 audit(1758690195.167:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10333 comm="syz.0.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccce38eec9 code=0x7ffc0000 [ 289.390332][ T5644] EXT4-fs (loop5): unmounting filesystem. [ 289.589931][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2605'. [ 289.689588][T10348] loop2: detected capacity change from 0 to 1024 [ 289.736810][T10348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.762577][T10348] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.828584][T10348] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 289.897927][T10348] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 289.933819][T10359] netlink: 'syz.1.2612': attribute type 3 has an invalid length. [ 289.942394][T10359] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2612'. [ 290.012236][T10361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2614'. [ 290.084977][T10363] tmpfs: Bad value for 'mpol' [ 290.169300][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 290.671583][T10383] loop1: detected capacity change from 0 to 256 [ 291.265571][T10401] IPv6: Can't replace route, no match found [ 291.444628][T10409] loop5: detected capacity change from 0 to 256 [ 291.477988][T10407] loop2: detected capacity change from 0 to 4096 [ 291.570717][T10407] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 292.048177][T10425] loop4: detected capacity change from 0 to 256 [ 292.146510][T10425] FAT-fs (loop4): Directory bread(block 64) failed [ 292.153561][T10425] FAT-fs (loop4): Directory bread(block 65) failed [ 292.181111][T10431] loop0: detected capacity change from 0 to 512 [ 292.207225][T10425] FAT-fs (loop4): Directory bread(block 66) failed [ 292.225401][T10425] FAT-fs (loop4): Directory bread(block 67) failed [ 292.263735][T10431] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.280379][T10425] FAT-fs (loop4): Directory bread(block 68) failed [ 292.317208][T10425] FAT-fs (loop4): Directory bread(block 69) failed [ 292.357164][T10425] FAT-fs (loop4): Directory bread(block 70) failed [ 292.358585][T10431] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 292.364460][T10425] FAT-fs (loop4): Directory bread(block 71) failed [ 292.405908][T10431] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.438857][T10438] loop5: detected capacity change from 0 to 64 [ 292.494329][T10425] FAT-fs (loop4): Directory bread(block 72) failed [ 292.523639][T10425] FAT-fs (loop4): Directory bread(block 73) failed [ 292.611600][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 292.814294][T10440] loop2: detected capacity change from 0 to 8192 [ 292.859465][T10440] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 292.972420][T10440] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 293.042202][T10440] REISERFS (device loop2): using ordered data mode [ 293.080257][T10440] reiserfs: using flush barriers [ 293.095202][ T41] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 293.111646][T10453] netlink: 'syz.4.2656': attribute type 21 has an invalid length. [ 293.140902][T10440] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 293.168491][T10453] netlink: 'syz.4.2656': attribute type 4 has an invalid length. [ 293.186379][T10440] REISERFS (device loop2): checking transaction log (loop2) [ 293.295286][ T41] usb 1-1: Using ep0 maxpacket: 16 [ 293.305714][ T41] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 293.345377][ T41] usb 1-1: config 0 has no interface number 0 [ 293.352003][ T41] usb 1-1: config 0 interface 237 has no altsetting 0 [ 293.403319][ T41] usb 1-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 293.442525][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2658'. [ 293.455316][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.484945][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2658'. [ 293.494504][ T41] usb 1-1: Product: syz [ 293.505842][ T41] usb 1-1: Manufacturer: syz [ 293.511071][T10440] REISERFS (device loop2): Using tea hash to sort names [ 293.530850][ T41] usb 1-1: SerialNumber: syz [ 293.538172][T10440] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 293.560450][ T41] usb 1-1: config 0 descriptor?? [ 293.584714][T10444] loop5: detected capacity change from 0 to 32768 [ 293.595622][ T41] snd_usb_podhd 1-1:0.237: Line 6 POD HD300 found [ 293.631380][T10444] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2654 (10444) [ 293.718957][T10444] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 293.774386][T10444] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 293.786635][ T41] snd_usb_podhd 1-1:0.237: cannot get proper max packet size [ 293.805730][ T41] snd_usb_podhd 1-1:0.237: Line 6 POD HD300 now disconnected [ 293.827545][ T41] snd_usb_podhd: probe of 1-1:0.237 failed with error -22 [ 293.827964][T10444] BTRFS info (device loop5): using free space tree [ 293.974856][T10463] loop4: detected capacity change from 0 to 4096 [ 293.999466][ T41] usb 1-1: USB disconnect, device number 10 [ 294.039711][T10463] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 294.084713][T10444] BTRFS info (device loop5): enabling ssd optimizations [ 294.251289][T10463] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 294.294083][T10463] ntfs3: loop4: mft corrupted [ 294.330816][T10463] ntfs3: loop4: Failed to load $Extend. [ 294.362519][ T5644] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 294.549669][T10489] loop2: detected capacity change from 0 to 1024 [ 294.730374][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 294.730388][ T26] audit: type=1326 audit(1758690200.727:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.1.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eab78eec9 code=0x7ffc0000 [ 294.838929][ T26] audit: type=1326 audit(1758690200.767:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.1.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eab78eec9 code=0x7ffc0000 [ 295.005249][ T26] audit: type=1326 audit(1758690200.767:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.1.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f3eab78eec9 code=0x7ffc0000 [ 295.122588][ T26] audit: type=1326 audit(1758690200.767:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.1.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eab78eec9 code=0x7ffc0000 [ 295.264579][ T26] audit: type=1326 audit(1758690200.767:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.1.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eab78eec9 code=0x7ffc0000 [ 295.638266][T10519] loop1: detected capacity change from 0 to 164 [ 295.669785][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2679'. [ 295.922823][ T4267] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 295.983088][ T4267] ISOFS: unable to read i-node block [ 296.020808][ T4267] ISOFS: unable to read i-node block [ 296.261497][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2689'. [ 296.275611][T10535] loop2: detected capacity change from 0 to 1024 [ 296.314103][T10536] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2689'. [ 296.383133][T10536] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2689'. [ 296.550682][ T40] hfsplus: b-tree write err: -5, ino 4 [ 296.639114][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.882049][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.108800][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.359326][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.441458][T10561] netlink: 'syz.5.2701': attribute type 9 has an invalid length. [ 297.862402][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.874500][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.888591][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.902715][ T4274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.911251][ T9] device .*! left promiscuous mode [ 297.918227][ T4274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 297.926725][ T4274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.948423][T10579] loop0: detected capacity change from 0 to 64 [ 299.148176][T10617] netlink: 'syz.0.2724': attribute type 21 has an invalid length. [ 299.195667][T10617] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2724'. [ 299.223672][T10617] netlink: 'syz.0.2724': attribute type 4 has an invalid length. [ 299.261161][T10617] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2724'. [ 299.393708][T10571] chnl_net:caif_netlink_parms(): no params data found [ 299.572157][T10628] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 299.595768][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2728'. [ 299.942731][T10639] loop0: detected capacity change from 0 to 4096 [ 299.985330][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 300.012821][T10639] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 300.250341][T10639] ntfs3: loop0: failed to convert "c46c" to cp857 [ 300.268853][T10597] loop5: detected capacity change from 0 to 32768 [ 300.413291][T10597] XFS (loop5): Mounting V5 Filesystem [ 300.480512][ T26] audit: type=1326 audit(1758690206.477:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.4.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 300.553255][ T26] audit: type=1326 audit(1758690206.507:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.4.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 300.577264][ T26] audit: type=1326 audit(1758690206.567:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.4.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 300.602036][ T26] audit: type=1326 audit(1758690206.567:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.4.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 300.628540][ T26] audit: type=1326 audit(1758690206.567:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.4.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 300.682919][T10597] XFS (loop5): Ending clean mount [ 300.763756][ T9] bond0: (slave wlan1): Releasing backup interface [ 300.852963][T10571] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.891239][T10571] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.922970][ T5644] XFS (loop5): Unmounting Filesystem [ 300.934390][T10571] device bridge_slave_0 entered promiscuous mode [ 301.030817][T10571] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.065746][T10571] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.089965][T10571] device bridge_slave_1 entered promiscuous mode [ 301.536793][T10571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.674798][ T9] device hsr_slave_0 left promiscuous mode [ 301.697174][ T9] device hsr_slave_1 left promiscuous mode [ 301.863154][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.906222][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.955627][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.964141][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.020373][ T9] batman_adv: batadv0: Interface deactivated: vlan1 [ 302.065783][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 302.073698][ T9] batman_adv: batadv0: Removing interface: vlan1 [ 302.128848][ T9] device team0 left promiscuous mode [ 302.134203][ T9] device team_slave_0 left promiscuous mode [ 302.142737][ T9] device team_slave_1 left promiscuous mode [ 302.154689][ T9] bridge0: port 4(team0) entered disabled state [ 302.174964][ T9] device dummy0 left promiscuous mode [ 302.185461][ T9] bridge0: port 3(dummy0) entered disabled state [ 302.223209][ T9] device bridge_slave_1 left promiscuous mode [ 302.241372][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.273486][ T9] device bridge_slave_0 left promiscuous mode [ 302.309313][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.481834][ T9] device veth1_macvtap left promiscuous mode [ 302.509535][ T9] device veth0_macvtap left promiscuous mode [ 302.526316][ T9] device veth1_vlan left promiscuous mode [ 302.565743][ T9] device veth0_vlan left promiscuous mode [ 302.678314][T10710] loop4: detected capacity change from 0 to 1024 [ 302.945464][ T9981] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 303.135689][ T9981] usb 3-1: Using ep0 maxpacket: 16 [ 303.155346][ T9981] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 303.201296][ T9981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.202995][T10696] loop5: detected capacity change from 0 to 32768 [ 303.230347][ T9981] usb 3-1: Product: syz [ 303.234598][ T9981] usb 3-1: Manufacturer: syz [ 303.262248][ T9981] usb 3-1: SerialNumber: syz [ 303.309595][ T9981] usb 3-1: config 0 descriptor?? [ 303.382749][ T9981] usb_ehset_test: probe of 3-1:0.0 failed with error -32 [ 303.398018][T10696] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 303.508400][T10696] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #0 [ 303.581109][T10696] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 303.596326][T10696] OCFS2: File system is now read-only. [ 303.602458][T10696] (syz.5.2750,10696,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 303.613943][T10696] (syz.5.2750,10696,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 303.624253][T10696] (syz.5.2750,10696,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 303.625774][ T9981] usb 3-1: USB disconnect, device number 9 [ 303.643544][T10696] (syz.5.2750,10696,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 303.662484][T10696] (syz.5.2750,10696,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 303.671153][T10696] (syz.5.2750,10696,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 303.690624][T10696] (syz.5.2750,10696,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 303.699686][T10696] (syz.5.2750,10696,1):ocfs2_mknod:385 ERROR: status = -30 [ 303.717763][T10696] (syz.5.2750,10696,1):ocfs2_mknod:502 ERROR: status = -30 [ 303.726737][T10696] (syz.5.2750,10696,1):ocfs2_mkdir:659 ERROR: status = -30 [ 303.791856][ T9] bond1 (unregistering): Released all slaves [ 303.855162][ T5644] ocfs2: Unmounting device (7,5) on (node local) [ 304.145378][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 305.135466][T10753] loop2: detected capacity change from 0 to 4096 [ 305.156935][ T9] team0 (unregistering): Port device team_slave_1 removed [ 305.208850][T10753] ntfs: volume version 3.1. [ 305.261004][ T9] team0 (unregistering): Port device team_slave_0 removed [ 305.361565][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.486325][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.225782][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 306.249783][ T9] bond0 (unregistering): Released all slaves [ 306.354786][T10571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.524403][T10571] team0: Port device team_slave_0 added [ 306.589820][T10571] team0: Port device team_slave_1 added [ 306.787874][T10571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.810095][T10571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.838652][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.846909][T10571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.862773][T10571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.871113][T10571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.901149][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.968367][T10571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.186600][T10571] device hsr_slave_0 entered promiscuous mode [ 307.225592][T10571] device hsr_slave_1 entered promiscuous mode [ 307.254155][T10571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.274064][T10571] Cannot create hsr debugfs directory [ 307.568296][T10785] tmpfs: Bad value for 'mpol' [ 307.699766][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2790'. [ 308.066308][T10803] xt_ecn: cannot match TCP bits for non-tcp packets [ 308.187907][T10571] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 308.226328][T10571] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.240628][T10805] loop4: detected capacity change from 0 to 2048 [ 308.287013][T10809] ipt_REJECT: ECHOREPLY no longer supported. [ 308.291921][T10571] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 308.295721][T10805] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 308.370628][T10805] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.370884][T10571] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 308.873826][T10571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.980180][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.017691][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.098598][T10571] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.157545][T10723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.189302][T10723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.224309][T10723] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.232593][T10723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.295511][T10723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.339229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 309.421631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.451335][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.458652][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.529784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 309.569520][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.626310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.720568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.736077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.786578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.807141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.830181][T10855] loop2: detected capacity change from 0 to 1024 [ 309.860681][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.880925][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.921835][T10571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.972264][T10571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 309.984550][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.006745][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.145372][T10494] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 310.191079][ T9981] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 310.217693][T10867] netlink: 'syz.2.2818': attribute type 21 has an invalid length. [ 310.261053][T10867] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2818'. [ 310.280506][T10867] netlink: 'syz.2.2818': attribute type 4 has an invalid length. [ 310.295328][T10867] netlink: 'syz.2.2818': attribute type 3 has an invalid length. [ 310.336420][T10867] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2818'. [ 310.351847][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2819'. [ 310.368793][T10494] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 310.390433][T10494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.392000][ T9981] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 310.418487][T10494] usb 5-1: Product: syz [ 310.426770][T10494] usb 5-1: Manufacturer: syz [ 310.431791][T10494] usb 5-1: SerialNumber: syz [ 310.446429][ T9981] usb 1-1: config 220 has an invalid descriptor of length 127, skipping remainder of the config [ 310.457755][T10494] usb 5-1: config 0 descriptor?? [ 310.534208][ T9981] usb 1-1: config 220 has no interface number 2 [ 310.577668][ T9981] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 310.631828][ T9981] usb 1-1: config 220 interface 0 has no altsetting 0 [ 310.649258][ T9981] usb 1-1: config 220 interface 76 has no altsetting 0 [ 310.681065][ T9981] usb 1-1: config 220 interface 1 has no altsetting 0 [ 310.709860][ T9981] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 310.709923][ T6926] usb 5-1: USB disconnect, device number 16 [ 310.755918][ T9981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.791795][ T9981] usb 1-1: Product: syz [ 310.815335][ T9981] usb 1-1: Manufacturer: syz [ 310.820265][ T9981] usb 1-1: SerialNumber: syz [ 310.860089][T10723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 310.877263][T10723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 310.923567][T10571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.047305][ T9981] usb 1-1: selecting invalid altsetting 0 [ 311.075490][ T9981] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 311.084373][ T9981] usb 1-1: No valid video chain found. [ 311.173311][ T9981] usb 1-1: selecting invalid altsetting 0 [ 311.185933][ T9981] usbtest: probe of 1-1:220.1 failed with error -22 [ 311.233679][ T9981] usb 1-1: USB disconnect, device number 11 [ 312.064282][T10920] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2834'. [ 312.360846][T10926] loop4: detected capacity change from 0 to 2048 [ 312.401235][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.429140][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.439423][T10926] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.532512][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 312.582722][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.647822][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 312.692579][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 312.742905][T10571] device veth0_vlan entered promiscuous mode [ 312.788948][T10571] device veth1_vlan entered promiscuous mode [ 312.844111][T10938] loop5: detected capacity change from 0 to 2048 [ 312.870187][T10941] netlink: 'syz.4.2841': attribute type 1 has an invalid length. [ 312.901585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 312.929100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 312.937395][T10938] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.968640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 313.014375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.056817][T10571] device veth0_macvtap entered promiscuous mode [ 313.102646][T10571] device veth1_macvtap entered promiscuous mode [ 313.222296][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.276948][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.307763][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.348267][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.375380][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.447591][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.484349][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.546848][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.613425][T10571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.659344][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.716504][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.752594][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.775653][T10966] xt_hashlimit: max too large, truncated to 1048576 [ 313.786376][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.806246][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.843388][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.873364][T10571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.906825][T10571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.947801][T10571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.974216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 314.013496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 314.034917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.052088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.063085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 314.116927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.119214][T10976] loop5: detected capacity change from 0 to 256 [ 314.142894][T10571] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.185447][T10571] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.195009][T10571] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.255252][T10571] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.545028][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.591739][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.679301][T10723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.694431][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 314.716148][T10723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.770416][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 315.053601][T11001] loop0: detected capacity change from 0 to 1024 [ 315.220278][T11006] loop6: detected capacity change from 0 to 512 [ 315.305925][ T4301] hfsplus: b-tree write err: -5, ino 4 [ 315.306878][T11006] EXT4-fs: Ignoring removed i_version option [ 315.386581][T11006] EXT4-fs error (device loop6): ext4_get_journal_inode:5737: comm syz.6.2694: inode #196608: comm syz.6.2694: iget: illegal inode # [ 315.493612][T11006] EXT4-fs (loop6): no journal found [ 315.499471][T11006] EXT4-fs (loop6): can't get journal size [ 315.595739][T11006] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 315.666491][T11006] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 315.729499][T11006] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 315.761587][T11006] EXT4-fs (loop6): unmounting filesystem. [ 316.523145][T11049] cgroup: No subsys list or none specified [ 317.129440][T11073] netlink: 'syz.2.2892': attribute type 10 has an invalid length. [ 317.152030][T11075] loop0: detected capacity change from 0 to 16 [ 317.216873][T11075] erofs: (device loop0): mounted with root inode @ nid 36. [ 317.227841][T11073] device veth0_macvtap left promiscuous mode [ 317.260118][T11073] batman_adv: batadv0: Adding interface: macvtap0 [ 317.266694][T11075] syz.0.2893: attempt to access beyond end of device [ 317.266694][T11075] loop0: rw=524288, sector=7864328, nr_sectors = 8 limit=16 [ 317.300606][T11073] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.335494][T11075] syz.0.2893: attempt to access beyond end of device [ 317.335494][T11075] loop0: rw=0, sector=7864328, nr_sectors = 8 limit=16 [ 317.354651][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.354943][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.395044][T11073] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 317.415907][ T26] audit: type=1800 audit(1758690223.417:112): pid=11075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2893" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 317.450099][ T4314] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 317.678875][ T4314] usb 6-1: config 1 has an invalid interface descriptor of length 6, skipping [ 317.699608][ T4314] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.763639][ T4314] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 317.794201][ T4314] usb 6-1: config 1 has no interface number 1 [ 317.832018][ T4314] usb 6-1: string descriptor 0 read error: -22 [ 317.873817][ T4314] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.931308][ T4314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.994900][ T4314] usb 6-1: MIDIStreaming interface descriptor not found [ 318.013894][T11092] loop0: detected capacity change from 0 to 16 [ 318.068266][T11092] erofs: (device loop0): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 318.088247][ T4314] snd-usb-audio: probe of 6-1:1.2 failed with error -16 [ 318.139329][T11092] erofs: (device loop0): mounted with root inode @ nid 36. [ 318.176730][ T4279] usb 6-1: USB disconnect, device number 7 [ 318.233081][T11092] syz.0.2899: attempt to access beyond end of device [ 318.233081][T11092] loop0: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 319.234601][T11088] loop4: detected capacity change from 0 to 32768 [ 319.390072][T11094] loop2: detected capacity change from 0 to 32768 [ 319.433487][T11088] XFS (loop4): Mounting V5 Filesystem [ 319.442388][T11128] loop0: detected capacity change from 0 to 1764 [ 319.469180][T11094] (syz.2.2900,11094,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 319.537133][T11136] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 319.537479][T11128] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 319.652758][T11088] XFS (loop4): Ending clean mount [ 319.691773][T11094] (syz.2.2900,11094,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 319.742960][T11088] XFS (loop4): Quotacheck needed: Please wait. [ 319.844694][T11088] XFS (loop4): Quotacheck: Done. [ 319.886434][T11094] JBD2: Ignoring recovery information on journal [ 320.058252][ T4278] XFS (loop4): Unmounting Filesystem [ 320.118288][T11094] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 320.451168][ T4283] ocfs2: Unmounting device (7,2) on (node local) [ 320.761116][T11166] xt_TPROXY: Can be used only with -p tcp or -p udp [ 321.262808][T11179] netlink: 'syz.0.2928': attribute type 15 has an invalid length. [ 321.305291][T11179] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2928'. [ 321.348616][T11182] loop6: detected capacity change from 0 to 256 [ 321.455505][T11186] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 321.534519][T11182] FAT-fs (loop6): Directory bread(block 64) failed [ 321.541821][T11182] FAT-fs (loop6): Directory bread(block 65) failed [ 321.590566][T11182] FAT-fs (loop6): Directory bread(block 66) failed [ 321.641237][T11182] FAT-fs (loop6): Directory bread(block 67) failed [ 321.654167][T11182] FAT-fs (loop6): Directory bread(block 68) failed [ 321.692486][T11182] FAT-fs (loop6): Directory bread(block 69) failed [ 321.718437][T11182] FAT-fs (loop6): Directory bread(block 70) failed [ 321.780333][T11182] FAT-fs (loop6): Directory bread(block 71) failed [ 321.809688][T11182] FAT-fs (loop6): Directory bread(block 72) failed [ 321.862399][T11197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2936'. [ 321.876561][T11182] FAT-fs (loop6): Directory bread(block 73) failed [ 321.887602][T11197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2936'. [ 322.343799][T11212] loop5: detected capacity change from 0 to 8 [ 322.884852][T11227] ptrace attach of "./syz-executor exec"[4283] was attempted by ""[11227] [ 323.165278][ T6929] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 323.222420][T11243] netlink: 'syz.2.2953': attribute type 30 has an invalid length. [ 323.388084][ T6929] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 323.412561][ T6929] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 323.454567][ T6929] usb 7-1: config 220 has no interface number 2 [ 323.475019][ T6929] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 323.562403][ T6929] usb 7-1: config 220 interface 0 has no altsetting 0 [ 323.580070][ T6929] usb 7-1: config 220 interface 76 has no altsetting 0 [ 323.611891][ T6929] usb 7-1: config 220 interface 1 has no altsetting 0 [ 323.654092][ T6929] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 323.695561][ T6929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.725284][ T6929] usb 7-1: Product: syz [ 323.739940][ T6929] usb 7-1: Manufacturer: syz [ 323.760283][ T6929] usb 7-1: SerialNumber: syz [ 323.955057][T11263] netlink: 'syz.5.2962': attribute type 13 has an invalid length. [ 324.011148][ T6929] usb 7-1: selecting invalid altsetting 0 [ 324.027209][ T6929] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 324.059495][ T6929] usb 7-1: No valid video chain found. [ 324.113872][ T6929] usb 7-1: selecting invalid altsetting 0 [ 324.142692][ T6929] usbtest: probe of 7-1:220.1 failed with error -22 [ 324.205430][ T6929] usb 7-1: USB disconnect, device number 2 [ 324.270267][T11274] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2966'. [ 325.084729][T11304] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2979'. [ 325.140805][T11304] netlink: 'syz.0.2979': attribute type 1 has an invalid length. [ 325.178280][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2979'. [ 325.323471][T11314] netlink: 308 bytes leftover after parsing attributes in process `syz.6.2980'. [ 325.380218][T11316] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 326.425552][T11350] tmpfs: Bad value for 'mpol' [ 326.860909][T11367] device wlan0 entered promiscuous mode [ 326.908306][T11367] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 327.540135][T11393] mmap: syz.2.3018 (11393): VmData 41648128 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 327.553516][T11390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3017'. [ 328.093729][T11407] device wlan0 entered promiscuous mode [ 328.142654][T11407] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 328.163825][T10494] kernel write not supported for file /1290/net/sockstat (pid: 10494 comm: kworker/1:19) [ 328.183545][T11410] loop6: detected capacity change from 0 to 2048 [ 328.218113][T11410] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 328.281045][T11410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.715826][T11425] loop0: detected capacity change from 0 to 1764 [ 328.805289][T11425] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 329.599698][T11452] device wlan0 entered promiscuous mode [ 329.626364][T11452] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 329.904638][T11463] netlink: 'syz.6.3047': attribute type 30 has an invalid length. [ 329.951027][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3048'. [ 330.239922][T11419] loop4: detected capacity change from 0 to 32768 [ 330.272321][T11477] loop6: detected capacity change from 0 to 8 [ 330.296183][T11419] gfs2: Bad value for 'locktable' [ 330.375714][T11476] loop2: detected capacity change from 0 to 2048 [ 330.457797][T11476] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 330.579841][T11476] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 330.788129][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 331.237506][T11505] loop5: detected capacity change from 0 to 1024 [ 331.261639][T11506] loop2: detected capacity change from 0 to 512 [ 331.279850][T11506] EXT4-fs: Ignoring removed nobh option [ 331.346563][T11506] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 331.425551][ T6929] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 331.582355][T11508] loop0: detected capacity change from 0 to 4096 [ 331.627223][ T6929] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 331.643030][T11508] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 331.645187][ T6929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.660034][T11508] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 331.685181][T11508] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 331.699875][ T6929] usb 7-1: config 0 descriptor?? [ 331.715179][T11508] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 331.727473][ T6929] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 331.745229][T11508] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 331.756446][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 331.773826][T11508] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 331.802458][T11508] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 331.821681][T11508] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 331.900527][T11508] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 331.942568][T11508] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00 [ 331.945640][T11521] xt_hashlimit: max too large, truncated to 1048576 [ 332.133511][ T6929] gp8psk: usb in 128 operation failed. [ 332.145635][ T6929] gp8psk: usb in 137 operation failed. [ 332.165249][ T6929] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 332.196990][ T6929] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 332.245566][ T6929] usb 7-1: USB disconnect, device number 3 [ 332.931202][T11544] program syz.6.3081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.537678][T11517] loop5: detected capacity change from 0 to 65536 [ 333.720438][T11517] XFS (loop5): Mounting V5 Filesystem [ 333.816142][T11517] XFS (loop5): Ending clean mount [ 333.860662][T11571] loop0: detected capacity change from 0 to 4096 [ 333.957263][T11578] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.007000][ T5644] XFS (loop5): Unmounting Filesystem [ 334.258898][T11564] loop2: detected capacity change from 0 to 32768 [ 334.499226][T11564] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 334.593907][T11564] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has bit count 39680 but max bitmap bits of 3584 [ 334.654128][T11564] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 334.733179][T11564] OCFS2: File system is now read-only. [ 334.773731][T11564] (syz.2.3092,11564,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 334.825947][T11564] (syz.2.3092,11564,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 334.834290][T11564] (syz.2.3092,11564,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 334.915932][T11564] (syz.2.3092,11564,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 334.924709][T11564] (syz.2.3092,11564,1):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 334.992155][T11602] loop4: detected capacity change from 0 to 64 [ 335.031477][T11564] (syz.2.3092,11564,1):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 335.052216][T11602] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 335.075882][T11564] (syz.2.3092,11564,1):ocfs2_block_group_alloc_contig:433 ERROR: status = -30 [ 335.085005][T11564] (syz.2.3092,11564,1):ocfs2_block_group_alloc:705 ERROR: status = -30 [ 335.155574][T11564] (syz.2.3092,11564,1):ocfs2_block_group_alloc:758 ERROR: status = -30 [ 335.205176][T11564] (syz.2.3092,11564,1):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30 [ 335.214496][T11564] (syz.2.3092,11564,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 335.282107][T11564] (syz.2.3092,11564,1):ocfs2_reserve_new_inode:1091 ERROR: status = -30 [ 335.333991][T11564] (syz.2.3092,11564,1):ocfs2_reserve_new_inode:1114 ERROR: status = -30 [ 335.381858][T11564] (syz.2.3092,11564,1):ocfs2_mknod:306 ERROR: status = -30 [ 335.425272][T11564] (syz.2.3092,11564,1):ocfs2_mknod:502 ERROR: status = -30 [ 335.462283][T11564] (syz.2.3092,11564,1):ocfs2_mkdir:659 ERROR: status = -30 [ 335.600701][T11617] loop6: detected capacity change from 0 to 1764 [ 335.674880][ T4283] ocfs2: Unmounting device (7,2) on (node local) [ 336.340293][T11644] loop0: detected capacity change from 0 to 512 [ 336.401940][T11644] EXT4-fs (loop0): orphan cleanup on readonly fs [ 336.495319][T11644] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 336.573570][T11644] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 336.795675][T11644] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.3119: attempt to clear invalid blocks 2 len 1 [ 336.848331][T11644] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3119: invalid indirect mapped block 1819239214 (level 0) [ 336.975019][T11644] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3119: invalid indirect mapped block 1819239214 (level 1) [ 337.048039][T11644] EXT4-fs (loop0): 1 truncate cleaned up [ 337.054142][T11644] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 337.148597][T11673] loop6: detected capacity change from 0 to 2048 [ 337.176953][T11644] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 337.253918][T11673] Alternate GPT is invalid, using primary GPT. [ 337.305315][T11644] EXT4-fs error (device loop0): __ext4_remount:6625: comm syz.0.3119: Abort forced by user [ 337.325382][T11673] loop6: p2 p3 p7 [ 337.361802][T11644] EXT4-fs (loop0): Remounting filesystem read-only [ 337.399860][T11644] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 337.452128][T11683] loop2: detected capacity change from 0 to 1024 [ 337.517098][T11683] EXT4-fs (loop2): orphan cleanup on readonly fs [ 337.722176][T11683] EXT4-fs (loop2): 1 truncate cleaned up [ 337.795517][T11683] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 337.833564][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 338.072711][ T4974] udevd[4974]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 338.092929][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 338.107868][ T4787] udevd[4787]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 338.108224][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 338.585344][T11716] netlink: 'syz.2.3146': attribute type 49 has an invalid length. [ 339.384233][T11737] loop6: detected capacity change from 0 to 4096 [ 339.433607][T11737] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 339.534751][T11700] loop4: detected capacity change from 0 to 32768 [ 339.630447][T11700] (syz.4.3140,11700,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 339.655200][T11737] ntfs3: loop6: failed to convert "c46c" to euc-jp [ 339.746206][T11700] (syz.4.3140,11700,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 339.880535][T11700] JBD2: Ignoring recovery information on journal [ 340.060483][T11700] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 340.154909][T11760] loop6: detected capacity change from 0 to 128 [ 340.165817][T11761] loop5: detected capacity change from 0 to 256 [ 340.193679][T11761] exfat: Deprecated parameter 'utf8' [ 340.206215][T11760] EXT4-fs: Ignoring removed nomblk_io_submit option [ 340.242436][T11760] EXT4-fs: Ignoring removed bh option [ 340.280663][T11761] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 340.314132][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 340.342223][T11760] EXT4-fs (loop6): Test dummy encryption mode enabled [ 340.426184][T11760] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 340.565440][T11760] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.635739][T11760] EXT4-fs: Ignoring removed nomblk_io_submit option [ 340.642862][T11760] EXT4-fs: Ignoring removed bh option [ 340.715651][T11760] EXT4-fs error (device loop6): __ext4_remount:6625: comm syz.6.3163: Abort forced by user [ 340.773241][T11760] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 340.942348][T10571] EXT4-fs (loop6): unmounting filesystem. [ 341.097819][ T6926] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 341.305289][ T6926] usb 6-1: Using ep0 maxpacket: 32 [ 341.319331][ T6926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.382943][ T6926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.403700][ T26] audit: type=1326 audit(1758690476.400:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 341.437867][ T6926] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 341.468230][ T6926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.488638][ T26] audit: type=1326 audit(1758690476.400:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 341.538523][ T6926] usb 6-1: config 0 descriptor?? [ 341.565864][ T6926] hub 6-1:0.0: USB hub found [ 341.594948][ T26] audit: type=1326 audit(1758690476.400:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 341.685780][ T26] audit: type=1326 audit(1758690476.400:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 341.752929][ T6926] hub 6-1:0.0: 31 ports detected [ 341.760482][ T6926] hub 6-1:0.0: insufficient power available to use all downstream ports [ 341.790128][ T26] audit: type=1326 audit(1758690476.400:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 341.886212][ T26] audit: type=1326 audit(1758690476.400:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 341.971683][ T6926] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 341.988554][ T6926] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 341.996714][ T26] audit: type=1326 audit(1758690476.400:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 342.035607][ T6926] usbhid 6-1:0.0: can't add hid device: -71 [ 342.063820][ T6926] usbhid: probe of 6-1:0.0 failed with error -71 [ 342.101370][ T26] audit: type=1326 audit(1758690476.400:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.4.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8b65d8eec9 code=0x7ffc0000 [ 342.126378][ T6926] usb 6-1: USB disconnect, device number 8 [ 342.350763][T11825] AppArmor: change_hat: Invalid input '' [ 342.486495][T11795] loop6: detected capacity change from 0 to 32768 [ 342.530228][T11831] loop2: detected capacity change from 0 to 256 [ 342.605543][T11795] ialloc: diAlloc returned -17! [ 343.943746][T11876] loop5: detected capacity change from 0 to 1024 [ 344.010050][T11876] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 344.070766][T11876] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869) [ 344.136548][T11876] EXT4-fs error (device loop5): ext4_get_journal_inode:5737: inode #5: comm syz.5.3209: unexpected bad inode w/o EXT4_IGET_BAD [ 344.187453][T11876] EXT4-fs (loop5): no journal found [ 344.192931][T11876] EXT4-fs (loop5): can't get journal size [ 344.270805][T11876] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 344.430492][T11843] loop6: detected capacity change from 0 to 32768 [ 344.542265][T11843] XFS (loop6): Mounting V5 Filesystem [ 344.551248][ T5644] EXT4-fs (loop5): unmounting filesystem. [ 344.836289][T11843] XFS (loop6): Ending clean mount [ 344.888965][T11843] XFS (loop6): Quotacheck needed: Please wait. [ 345.065838][T11843] XFS (loop6): Quotacheck: Done. [ 345.318505][T10571] XFS (loop6): Unmounting Filesystem [ 345.470244][T11923] loop5: detected capacity change from 0 to 256 [ 345.832317][T11933] loop4: detected capacity change from 0 to 764 [ 345.992746][T11933] ISOFS: unable to read i-node block [ 346.038413][T11933] isofs_fill_super: get root inode failed [ 346.432797][T11952] loop2: detected capacity change from 0 to 512 [ 346.490494][T11952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 346.530882][T11952] EXT4-fs: Ignoring removed bh option [ 346.624149][T11952] EXT4-fs error (device loop2): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 346.778193][T11952] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.3236: corrupted inode contents [ 346.818840][T11952] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #11: comm syz.2.3236: mark_inode_dirty error [ 346.851598][T11952] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3236: invalid indirect mapped block 1 (level 1) [ 346.949105][T11952] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.3236: corrupted inode contents [ 347.035455][T11952] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 347.060224][T11952] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.3236: corrupted inode contents [ 347.129800][T11952] EXT4-fs error (device loop2): ext4_truncate:4312: inode #11: comm syz.2.3236: mark_inode_dirty error [ 347.145525][T11974] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3243'. [ 347.166983][T11952] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 347.177746][T11974] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3243'. [ 347.198585][T11952] EXT4-fs (loop2): 1 truncate cleaned up [ 347.207160][T11974] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3243'. [ 347.222480][T11952] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 347.296035][T11952] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 13: comm syz.2.3236: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 347.624644][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 348.071942][T12003] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock [ 348.870459][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3266'. [ 349.022222][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3267'. [ 349.349340][T12049] loop4: detected capacity change from 0 to 2048 [ 349.357090][ T6926] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 349.453079][T12049] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 349.555252][ T6926] usb 1-1: Using ep0 maxpacket: 16 [ 349.576437][ T6926] usb 1-1: config 0 has an invalid interface number: 102 but max is 0 [ 349.595144][ T6926] usb 1-1: config 0 has no interface number 0 [ 349.608135][ T6926] usb 1-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 349.635972][ T6926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.665168][ T6926] usb 1-1: Product: syz [ 349.675760][ T6926] usb 1-1: Manufacturer: syz [ 349.699714][ T6926] usb 1-1: SerialNumber: syz [ 349.738033][ T6926] usb 1-1: config 0 descriptor?? [ 349.752749][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 349.771672][ T6926] usb-storage 1-1:0.102: USB Mass Storage device detected [ 349.836213][ T6926] usb-storage 1-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 349.849040][ T6926] usb-storage 1-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 349.849040][ T6926] Please send a copy of this message to and [ 350.055296][T10494] usb 1-1: USB disconnect, device number 12 [ 350.362694][T12087] netlink: 'syz.4.3285': attribute type 10 has an invalid length. [ 350.434942][T12087] team0: Port device macvlan0 added [ 350.565658][T12094] Timeout policy `syz0' can only be used by L3 protocol number 2015 [ 350.868491][T12102] No such timeout policy "syz1" [ 350.909611][T12104] loop2: detected capacity change from 0 to 256 [ 351.183456][T12112] vivid-001: ================= START STATUS ================= [ 351.223867][T12112] vivid-001: Radio HW Seek Mode: Bounded [ 351.247845][T12112] vivid-001: Radio Programmable HW Seek: false [ 351.248167][T12106] loop5: detected capacity change from 0 to 4096 [ 351.260444][T12112] vivid-001: RDS Rx I/O Mode: Block I/O [ 351.272485][T12112] vivid-001: Generate RBDS Instead of RDS: false [ 351.300409][T12112] vivid-001: RDS Reception: true [ 351.314662][T12112] vivid-001: RDS Program Type: 0 inactive [ 351.316686][T12106] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 351.375427][T12112] vivid-001: RDS PS Name: inactive [ 351.415452][T12112] vivid-001: RDS Radio Text: inactive [ 351.438079][T12118] overlayfs: missing 'lowerdir' [ 351.449566][T12112] vivid-001: RDS Traffic Announcement: false inactive [ 351.475238][T12112] vivid-001: RDS Traffic Program: false inactive [ 351.490136][T12106] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 351.515851][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3299'. [ 351.535564][T12112] vivid-001: RDS Music: false inactive [ 351.541509][T12106] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 351.572182][T12112] vivid-001: ================== END STATUS ================== [ 351.596667][T12106] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 351.625673][T12106] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 351.647927][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.681369][T12106] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 351.721154][T12106] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 351.742723][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.797942][T12126] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3301'. [ 351.845496][T12126] device netdevsim0 entered promiscuous mode [ 351.850616][T12106] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 351.881954][T12106] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 351.978896][T12106] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 352.014141][T12130] netlink: 'syz.0.3302': attribute type 10 has an invalid length. [ 352.026013][T12106] ntfs: volume version 3.1. [ 352.174529][T12130] team0: Port device macvlan0 added [ 352.843007][T12156] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 353.122398][T12168] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3319'. [ 353.173256][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3319'. [ 353.217854][T12168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3319'. [ 353.277619][T12168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3319'. [ 353.604695][T12186] loop4: detected capacity change from 0 to 8 [ 354.077356][ T48] Bluetooth: Wrong link type (-71) [ 354.347272][T12164] loop6: detected capacity change from 0 to 32768 [ 354.416976][T12164] (syz.6.3317,12164,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 354.480347][T12164] (syz.6.3317,12164,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 354.582788][T12211] loop2: detected capacity change from 0 to 2048 [ 354.613360][T12164] JBD2: Ignoring recovery information on journal [ 354.710716][T12221] device netdevsim0 entered promiscuous mode [ 354.717359][T12221] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 354.802448][T12211] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 354.921980][T12164] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 354.989600][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 355.033827][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 355.045467][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.061098][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 355.228760][T10571] ocfs2: Unmounting device (7,6) on (node local) [ 355.867574][T12216] loop5: detected capacity change from 0 to 32768 [ 355.876614][T12248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3351'. [ 355.907263][T12216] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.3337 (12216) [ 355.944377][T12216] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 355.985601][T12216] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 356.024623][T12216] BTRFS info (device loop5): using free space tree [ 356.041547][T12252] loop6: detected capacity change from 0 to 1024 [ 356.358751][T12274] loop0: detected capacity change from 0 to 1024 [ 356.384263][T12274] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 356.425425][T12216] BTRFS info (device loop5): enabling ssd optimizations [ 356.532694][T12274] hfsplus: filesystem is marked journaled, leaving read-only. [ 356.780550][ T5644] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 357.035022][T12293] Cannot find map_set index 0 as target [ 357.085867][T12297] netlink: 'syz.4.3367': attribute type 1 has an invalid length. [ 357.713463][T12314] netlink: 'syz.5.3372': attribute type 10 has an invalid length. [ 357.765471][ T9981] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 357.790936][T12314] team0: Port device macvlan0 added [ 357.969791][ T9981] usb 3-1: config 6 has an invalid interface number: 109 but max is 0 [ 357.985183][ T9981] usb 3-1: config 6 has no interface number 0 [ 358.005382][ T9981] usb 3-1: config 6 interface 109 has no altsetting 0 [ 358.035160][ T9981] usb 3-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=62.59 [ 358.075619][ T9981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.090750][T12323] netlink: 'syz.4.3378': attribute type 10 has an invalid length. [ 358.104582][T12325] comedi comedi0: dt2817: I/O port conflict (0x3,5) [ 358.117656][T12323] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.126845][T12323] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.141308][ T9981] usb 3-1: Found UVC 0.00 device (046d:0821) [ 358.152919][T12323] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.160954][T12323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.165364][ T9981] usb 3-1: No valid video chain found. [ 358.172771][T12323] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.182784][T12323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.354170][ T9981] usb 3-1: USB disconnect, device number 10 [ 358.457130][T12329] loop0: detected capacity change from 0 to 8192 [ 358.474369][T12323] team0: Port device bridge0 added [ 358.508915][T12329] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 358.559099][T12329] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 358.570561][T12329] REISERFS (device loop0): using ordered data mode [ 358.578410][T12329] reiserfs: using flush barriers [ 358.594159][T12329] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 358.621791][T12329] REISERFS (device loop0): checking transaction log (loop0) [ 358.626350][T12339] loop5: detected capacity change from 0 to 8 [ 358.667462][T12329] REISERFS (device loop0): Using r5 hash to sort names [ 358.685722][T12329] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 358.780106][T12339] SQUASHFS error: Failed to read block 0x6e6: -5 [ 358.802207][T12339] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 358.818452][T12339] SQUASHFS error: Unable to read directory block [631:26] [ 359.158886][T12351] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 359.196116][T12351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 359.227181][T12351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 359.255912][T12351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 359.303815][T12351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.336177][T12351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.408527][T12351] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 359.484992][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3397'. [ 359.515392][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3397'. [ 359.804820][T12373] loop5: detected capacity change from 0 to 16 [ 359.860746][T12373] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 360.234306][T12387] loop2: detected capacity change from 0 to 512 [ 360.325392][T12387] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 360.345530][T12387] ext4 filesystem being mounted at /720/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.496784][T12387] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 360.525814][T12387] __quota_error: 11 callbacks suppressed [ 360.525833][T12387] Quota error (device loop2): write_blk: dquota write failed [ 360.535693][T12386] loop0: detected capacity change from 0 to 4096 [ 360.551452][T12387] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 360.610706][T12387] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.3409: Failed to acquire dquot type 0 [ 360.612528][T12386] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 360.712639][T12386] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 360.767379][T12386] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 360.812879][T12381] loop6: detected capacity change from 0 to 32768 [ 360.816130][T12386] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 360.856874][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 360.892157][T12381] ea_get: invalid extended attribute [ 360.954408][T12386] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 361.034464][T12386] ntfs: volume version 3.1. [ 361.072397][T12404] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 361.079339][T12386] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 361.092606][T12404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 361.160066][T12386] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 361.166338][T12404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 361.250381][T12386] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 362.971024][T12423] loop6: detected capacity change from 0 to 32768 [ 363.037486][T12423] [ 363.037486][T12423] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 363.037486][T12423] [ 363.126163][T12423] JFS: metapage_get_blocks failed [ 363.155007][T12423] ERROR: (device loop6): release_metapage: write_one_page() failed [ 363.155007][T12423] [ 363.263762][T12423] ERROR: (device loop6): diWrite: ixpxd invalid [ 363.263762][T12423] [ 363.295342][T12423] ERROR: (device loop6): txCommit: [ 363.295342][T12423] [ 363.518632][T12463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3443'. [ 363.521386][T10571] [ 363.521386][T10571] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 363.521386][T10571] [ 363.630206][T10571] [ 363.630206][T10571] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 363.630206][T10571] [ 363.748560][T12471] netlink: 'syz.2.3447': attribute type 2 has an invalid length. [ 364.338802][T12493] loop2: detected capacity change from 0 to 128 [ 364.382460][T12493] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 364.461754][T12493] ext4 filesystem being mounted at /730/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.602843][T12493] EXT4-fs warning (device loop2): ext4_group_extend:1870: can't shrink FS - resize aborted [ 364.801891][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 365.016437][T12476] loop0: detected capacity change from 0 to 32768 [ 365.082509][T12476] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 365.082509][T12476] [ 365.091616][T12507] loop2: detected capacity change from 0 to 16 [ 365.112372][T12476] ialloc: diAlloc returned -5! [ 365.143423][T12507] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 366.586205][T12549] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3483'. [ 366.762719][T12555] loop2: detected capacity change from 0 to 512 [ 366.874798][T12555] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 366.901134][T12560] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 366.997557][T12555] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 367.051526][T12555] EXT4-fs (loop2): 1 truncate cleaned up [ 367.072883][T12555] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 367.330444][T12572] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3493'. [ 367.358689][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 367.855362][ T9979] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 367.976176][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 367.976193][ T26] audit: type=1326 audit(2000000006.350:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.6.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caed8eec9 code=0x7ffc0000 [ 368.039899][T12594] loop5: detected capacity change from 0 to 64 [ 368.065379][ T9979] usb 5-1: Using ep0 maxpacket: 8 [ 368.084312][ T9979] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 368.159781][ T9979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.182123][ T26] audit: type=1326 audit(2000000006.350:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.6.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caed8eec9 code=0x7ffc0000 [ 368.215769][ T9979] usb 5-1: Product: syz [ 368.220014][ T9979] usb 5-1: Manufacturer: syz [ 368.245180][ T9979] usb 5-1: SerialNumber: syz [ 368.276753][ T9979] usb 5-1: config 0 descriptor?? [ 368.340937][ T9979] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 368.363549][ T26] audit: type=1326 audit(2000000006.350:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.6.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f5caed8eec9 code=0x7ffc0000 [ 368.475867][ T26] audit: type=1326 audit(2000000006.350:128): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.6.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caed8eec9 code=0x7ffc0000 [ 368.587631][ T26] audit: type=1326 audit(2000000006.350:129): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=12590 comm="syz.6.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caed8eec9 code=0x7ffc0000 [ 368.666924][T12577] loop2: detected capacity change from 0 to 32768 [ 368.744592][ T9979] radio-usb-si4713: probe of 5-1:0.0 failed with error -71 [ 368.756302][ T9979] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 368.775732][ T9979] usb 5-1: USB disconnect, device number 17 [ 368.795005][T12577] [ 368.795005][T12577] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 368.795005][T12577] [ 368.851955][T12577] __jfs_setxattr: xattr_size = 243, new_size = 337 [ 368.914509][T12612] netlink: 'syz.5.3513': attribute type 12 has an invalid length. [ 369.003134][ T40] [ 369.003134][ T40] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 369.003134][ T40] [ 369.031627][ T40] [ 369.031627][ T40] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 369.031627][ T40] [ 369.065438][ T4283] [ 369.065438][ T4283] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 369.065438][ T4283] [ 369.091644][ T4283] [ 369.091644][ T4283] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 369.091644][ T4283] [ 369.131533][ T108] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN [ 369.144270][ T108] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 369.153242][ T108] CPU: 1 PID: 108 Comm: jfsCommit Not tainted syzkaller #0 [ 369.160567][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 369.171090][ T108] RIP: 0010:lmLogSync+0x135/0x9c0 [ 369.177658][ T108] Code: 76 bc fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 69 d1 e3 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 4d d1 e3 fe 49 8b 3f e8 45 76 bc fe [ 369.190841][T12618] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3517'. [ 369.198905][ T108] RSP: 0018:ffffc90002d47c60 EFLAGS: 00010206 [ 369.198934][ T108] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: ff1f9a523cb27000 [ 369.198948][ T108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.198959][ T108] RBP: ffffc90002d47d68 R08: dffffc0000000000 R09: ffffc90002d47b84 [ 369.198972][ T108] R10: fffff520005a8f79 R11: 1ffff920005a8f70 R12: ffff888062f45000 [ 369.198986][ T108] R13: dffffc0000000000 R14: ffff888018ab8638 R15: 0000000000000030 [ 369.209270][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3517'. [ 369.215740][ T108] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 369.215768][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.215780][ T108] CR2: 0000001b2fc14ff8 CR3: 000000007dac3000 CR4: 00000000003506e0 [ 369.215798][ T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 369.215809][ T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 369.215821][ T108] Call Trace: [ 369.215829][ T108] [ 369.215840][ T108] ? lmWriteRecord+0x1ac0/0x1ac0 [ 369.215867][ T108] ? __rwlock_init+0x140/0x140 [ 369.215895][ T108] jfs_syncpt+0x77/0x90 [ 369.215913][ T108] txEnd+0x2e1/0x520 [ 369.215933][ T108] jfs_lazycommit+0x5a2/0xa50 [ 369.215954][ T108] ? txFreelock+0x5a0/0x5a0 [ 369.215972][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 369.215999][ T108] ? do_task_dead+0xd0/0xd0 [ 369.216021][ T108] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 369.216048][ T108] ? __kthread_parkme+0x162/0x1c0 [ 369.216075][ T108] kthread+0x29d/0x330 [ 369.216101][ T108] ? txFreelock+0x5a0/0x5a0 [ 369.382151][ T108] ? kthread_blkcg+0xd0/0xd0 [ 369.387823][ T108] ret_from_fork+0x1f/0x30 [ 369.393293][ T108] [ 369.397731][ T108] Modules linked in: [ 369.426859][ T108] ---[ end trace 0000000000000000 ]--- [ 369.433485][ T108] RIP: 0010:lmLogSync+0x135/0x9c0 [ 369.438994][ T108] Code: 76 bc fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 69 d1 e3 fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 4d d1 e3 fe 49 8b 3f e8 45 76 bc fe [ 369.461721][ T108] RSP: 0018:ffffc90002d47c60 EFLAGS: 00010206 [ 369.469040][ T108] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: ff1f9a523cb27000 [ 369.478098][ T108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.487045][ T108] RBP: ffffc90002d47d68 R08: dffffc0000000000 R09: ffffc90002d47b84 [ 369.496009][ T108] R10: fffff520005a8f79 R11: 1ffff920005a8f70 R12: ffff888062f45000 [ 369.504191][ T108] R13: dffffc0000000000 R14: ffff888018ab8638 R15: 0000000000000030 [ 369.512946][ T108] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 369.523090][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.530190][ T108] CR2: 00007f5caefb4198 CR3: 000000002f3b9000 CR4: 00000000003506f0 [ 369.538662][ T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 369.547575][ T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 369.565714][ T108] Kernel panic - not syncing: Fatal exception [ 369.572678][ T108] Kernel Offset: disabled [ 369.577627][ T108] Rebooting in 86400 seconds..