last executing test programs: 2.759553485s ago: executing program 3 (id=14483): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed40102030109022400010000000009040002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.397566286s ago: executing program 1 (id=14498): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001280)=[{&(0x7f0000000000)="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", 0x443}], 0x1) 1.162983321s ago: executing program 1 (id=14501): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x40, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 1.05301365s ago: executing program 1 (id=14504): r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x101f, 0x1, 0x11, r0, 0x82000000) 981.988997ms ago: executing program 0 (id=14505): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x101000) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0445624, &(0x7f0000000300)={0xf0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x100000000, 0xfffffffffdfff003, 0x0, 0x9, 0x5, 0x2, 0x2, [0x9, 0x2, 0x0, 0xfffffffd]}) 939.541938ms ago: executing program 2 (id=14506): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x31, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 922.673416ms ago: executing program 1 (id=14507): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x1b}}) 844.948701ms ago: executing program 2 (id=14508): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f00000002c0)) 818.566166ms ago: executing program 1 (id=14509): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 785.64166ms ago: executing program 0 (id=14510): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 773.400557ms ago: executing program 3 (id=14511): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000180)="0bbb268dd6ffa80800000000000000000000210d008e02668e942f95139380d412000000000000002900000004000000a197", 0x32) 709.783795ms ago: executing program 1 (id=14512): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x21, 0x61b6, &(0x7f00000075c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) 655.902015ms ago: executing program 2 (id=14513): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40040) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0xffffffffffffffff) 552.484655ms ago: executing program 0 (id=14514): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x30, 0x107, 0xfffffffe, 0x0, {0x7, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2f89b85f9b3dc9d7}, 0x8010) 551.913395ms ago: executing program 3 (id=14515): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x20, &(0x7f0000003e40)=""/222}, 0x94) 464.210978ms ago: executing program 2 (id=14516): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xd1, 0x0, 0x4) 395.351775ms ago: executing program 3 (id=14517): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8001) writev(r0, &(0x7f0000000680)=[{&(0x7f00000001c0)="0b990aac35e37024308758b4dc3b39fe5fa2167ea6e6ba82", 0x18}], 0x1) 363.971079ms ago: executing program 0 (id=14518): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 328.744772ms ago: executing program 2 (id=14519): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0x0, 0x34424752, 0x4, 0x800, 0x4, 0x5, 0x7, 0x0, 0x4, 0x1, 0x6}}) 214.9747ms ago: executing program 3 (id=14520): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) sendfile(r0, r0, 0x0, 0x81) 173.444203ms ago: executing program 0 (id=14521): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40000) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000001c0)={0x800, 0x9, 0x0, 0x0, 0x0, 0x58, &(0x7f0000000140)=""/88, 0xd0, 0xffffffffffffffff}) 170.822712ms ago: executing program 2 (id=14522): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@dioread_lock}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00ffff888050cf1000(4096) [ 1423.972489][ T8369] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1423.973142][ T2834] cramfs: bad data blocksize 4165569313 [ 1423.987764][ T8369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.026981][ T8369] usb 2-1: Product: syz [ 1424.036972][ T8369] usb 2-1: Manufacturer: syz [ 1424.048913][ T2834] cramfs: bad data blocksize 3825676623 [ 1424.054685][ T2834] cramfs: bad data blocksize 4294480561 [ 1424.058928][ T8369] usb 2-1: SerialNumber: syz [ 1424.066211][ T2834] cramfs: bad data blocksize 1076736 [ 1424.078399][ T8369] usb 2-1: config 0 descriptor?? [ 1424.090211][ T2834] cramfs: bad data blocksize 485460736 [ 1424.092929][ T8369] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1424.103988][ T2834] cramfs: bad data blocksize 3808479469 [ 1424.142564][ T2834] cramfs: bad data blocksize 3222268820 [ 1424.152551][ T28] audit: type=1800 audit(2000004977.383:269): pid=2834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13233" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 1424.319240][ T2853] xt_connbytes: Forcing CT accounting to be enabled [ 1424.512420][ T8369] gspca_sunplus: reg_w_riv err -71 [ 1424.517858][ T8369] sunplus: probe of 2-1:0.0 failed with error -71 [ 1424.531152][ T2860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13244'. [ 1424.552744][ T8369] usb 2-1: USB disconnect, device number 68 [ 1424.668289][ T2864] netlink: 'syz.3.13246': attribute type 10 has an invalid length. [ 1424.718421][ T2864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1424.742443][ T2864] bond0: (slave team0): Enslaving as an active interface with an up link [ 1424.761434][ T2868] loop2: detected capacity change from 0 to 256 [ 1425.073863][ T2879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13253'. [ 1425.239794][ T2885] loop1: detected capacity change from 0 to 128 [ 1425.448315][ T2890] loop0: detected capacity change from 0 to 1024 [ 1425.607376][ T2894] loop2: detected capacity change from 0 to 1764 [ 1425.871046][ T2906] AppArmor: change_hat: Invalid input '0' [ 1425.912515][ T8369] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1426.130671][ T8369] usb 4-1: Using ep0 maxpacket: 32 [ 1426.150463][ T8369] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1426.172717][ T8369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.196828][ T8369] usb 4-1: config 0 descriptor?? [ 1426.218832][ T8369] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1426.464975][ T6351] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1426.609051][ T8369] gspca_vc032x: reg_w err -71 [ 1426.623309][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.632847][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.645181][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.650998][ T6351] usb 2-1: Using ep0 maxpacket: 16 [ 1426.662241][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.669741][ T6351] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.680321][ T2930] netlink: 'syz.0.13278': attribute type 17 has an invalid length. [ 1426.689215][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.694737][ T6351] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1426.697670][ T2930] netlink: 'syz.0.13278': attribute type 16 has an invalid length. [ 1426.704245][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.724705][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.731754][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.738760][ T6351] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1426.749157][ T6351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.758249][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.759667][ T2930] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13278'. [ 1426.764723][ T6351] usb 2-1: Product: syz [ 1426.784486][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.794023][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.802368][ T6351] usb 2-1: Manufacturer: syz [ 1426.810244][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.816109][ T6351] usb 2-1: SerialNumber: syz [ 1426.823450][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.842600][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.865320][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.889959][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.904243][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.910020][ T8369] gspca_vc032x: I2c Bus Busy Wait 00 [ 1426.915524][ T8369] gspca_vc032x: Unknown sensor... [ 1426.926434][ T8369] vc032x: probe of 4-1:0.0 failed with error -22 [ 1426.936941][ T8369] usb 4-1: USB disconnect, device number 76 [ 1427.051199][ T6351] usb 2-1: 0:2 : does not exist [ 1427.072004][ T6351] usb 2-1: unit 9 not found! [ 1427.086421][ T6351] usb 2-1: 4:0: cannot get min/max values for control 4 (id 4) [ 1427.114102][ T6351] usb 2-1: USB disconnect, device number 69 [ 1427.170130][ T7424] udevd[7424]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1427.348233][ T1188] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1427.550802][ T2926] syz.2.13276 (2926): drop_caches: 2 [ 1427.571996][ T1188] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 1427.590527][ T1188] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.623909][ T1188] usb 1-1: config 0 has no interface number 0 [ 1427.631253][ T2940] loop2: detected capacity change from 0 to 64 [ 1427.642354][ T1188] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1427.669735][ T1188] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1427.691186][ T2940] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1427.716539][ T1188] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1427.788422][ T1188] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1427.802471][ T1188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2 [ 1427.809846][ T2944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13285'. [ 1427.828007][ T1188] usb 1-1: SerialNumber: syz [ 1427.839231][ T2946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13286'. [ 1427.859371][ T1188] usb 1-1: config 0 descriptor?? [ 1427.887152][ T1188] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1428.087273][ T1188] spca561: probe of 1-1:0.156 failed with error -22 [ 1428.102154][ T1188] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1428.109893][ T1188] usb 1-1: MIDIStreaming interface descriptor not found [ 1428.160330][ T1188] usb 1-1: USB disconnect, device number 83 [ 1428.292930][ T6709] udevd[6709]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1428.798780][ T2966] loop1: detected capacity change from 0 to 128 [ 1429.099618][ T28] audit: type=1400 audit(2000004982.694:270): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=2971 comm="syz.0.13298" [ 1429.587246][ T2987] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1429.610829][ T2966] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1429.628103][ T2959] syz.3.13292 (2959): drop_caches: 2 [ 1429.634470][ T2987] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1429.646296][ T2966] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1430.942374][ T3038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13329'. [ 1430.960946][ T3038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13329'. [ 1430.993883][ T3038] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13329'. [ 1430.997540][ T3008] loop3: detected capacity change from 0 to 32768 [ 1431.125827][ T3049] loop0: detected capacity change from 0 to 164 [ 1431.141401][ T3008] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1431.524022][ T3008] XFS (loop3): Starting recovery (logdev: internal) [ 1431.612529][ T3008] XFS (loop3): Ending recovery (logdev: internal) [ 1431.881191][ T6369] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1432.025416][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1432.050142][ T3079] batadv_slave_0: entered promiscuous mode [ 1432.064767][ T3079] batadv_slave_0: entered allmulticast mode [ 1432.090863][ T3079] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1432.284687][ T3087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13351'. [ 1432.314124][ T3089] xt_cgroup: invalid path, errno=-2 [ 1432.321691][ T3086] loop2: detected capacity change from 0 to 1024 [ 1432.413513][ T3086] hfsplus: keylen 65060 too large [ 1432.638309][ T3091] loop0: detected capacity change from 0 to 4096 [ 1432.664591][ T3091] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1432.688426][ T3091] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 1432.712673][ T3091] System zones: 0-5 [ 1432.738576][ T3091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1432.863504][ T3104] loop2: detected capacity change from 0 to 64 [ 1432.866400][ T3103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13357'. [ 1432.905006][ T6372] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.935326][ T3104] hfs: keylen 40 too large [ 1433.372289][ T3121] netlink: 276 bytes leftover after parsing attributes in process `syz.2.13367'. [ 1433.792453][ T3140] xt_hashlimit: overflow, try lower: 642/0 [ 1434.078759][ T3146] loop2: detected capacity change from 0 to 8192 [ 1434.324533][ T3163] netlink: 'syz.1.13386': attribute type 9 has an invalid length. [ 1434.505257][ T3165] loop2: detected capacity change from 0 to 4096 [ 1434.531527][ T3165] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1434.670137][ T3165] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1434.777247][ T3165] ntfs3: loop2: failed to convert "c46c" to maccyrillic [ 1435.026733][ T3161] loop0: detected capacity change from 0 to 32768 [ 1435.033546][ T3180] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13393'. [ 1435.060577][ T3180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13393'. [ 1435.137935][ T3161] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 1435.249442][ T3161] ocfs2: Unmounting device (7,0) on (node local) [ 1435.988750][ T3219] cgroup: release_agent respecified [ 1436.215693][ T3229] loop2: detected capacity change from 0 to 512 [ 1436.297981][ T3229] EXT4-fs: Ignoring removed bh option [ 1436.347367][ T3229] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1436.379851][ T3229] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1436.410578][ T3229] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1436.436711][ T3229] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 1436.489784][ T3229] System zones: 0-2, 18-18, 34-35 [ 1436.511497][ T3229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1436.659657][ T3229] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.13417: bg 0: block 353: padding at end of block bitmap is not set [ 1436.813446][ T6366] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1436.863038][ T3235] loop1: detected capacity change from 0 to 32768 [ 1436.967448][ T3235] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1437.002930][ T3256] loop3: detected capacity change from 0 to 256 [ 1437.057264][ T3256] FAT-fs (loop3): Directory bread(block 1285) failed [ 1437.087784][ T3256] FAT-fs (loop3): Directory bread(block 1286) failed [ 1437.110784][ T3256] FAT-fs (loop3): Directory bread(block 1287) failed [ 1437.120954][ T3235] XFS (loop1): Ending clean mount [ 1437.129541][ T3256] FAT-fs (loop3): Directory bread(block 1288) failed [ 1437.146987][ T3235] XFS (loop1): Quotacheck needed: Please wait. [ 1437.201093][ T3256] FAT-fs (loop3): Directory bread(block 1285) failed [ 1437.224322][ T3256] FAT-fs (loop3): Directory bread(block 1286) failed [ 1437.227791][ T3264] bridge0: port 3(bond0) entered blocking state [ 1437.246749][ T3264] bridge0: port 3(bond0) entered disabled state [ 1437.269940][ T3256] FAT-fs (loop3): Directory bread(block 1287) failed [ 1437.276785][ T3264] bond0: entered allmulticast mode [ 1437.276807][ T3264] bond_slave_0: entered allmulticast mode [ 1437.276822][ T3264] bond_slave_1: entered allmulticast mode [ 1437.294313][ T3264] bond0: entered promiscuous mode [ 1437.305534][ T3264] bond_slave_0: entered promiscuous mode [ 1437.317858][ T3256] FAT-fs (loop3): Directory bread(block 1288) failed [ 1437.325517][ T3256] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 1437.336216][ T3235] XFS (loop1): Quotacheck: Done. [ 1437.336221][ T3264] bond_slave_1: entered promiscuous mode [ 1437.393378][ T6374] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1437.679727][ T6351] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1437.873213][ T6351] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 1437.885901][ T6351] usb 3-1: config 0 has no interface number 0 [ 1437.899380][ T6351] usb 3-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1437.927527][ T6351] usb 3-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid maxpacket 47698, setting to 1024 [ 1437.951237][ T6351] usb 3-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1437.974882][ T6351] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 1437.992146][ T6351] usb 3-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 1438.000192][ T6351] usb 3-1: Product: syz [ 1438.010619][ T6351] usb 3-1: Manufacturer: syz [ 1438.019397][ T6351] usb 3-1: SerialNumber: syz [ 1438.031595][ T6351] usb 3-1: config 0 descriptor?? [ 1438.038049][ T3267] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1438.061839][ T6351] ni6501 3-1:0.238: driver 'ni6501' failed to auto-configure device. [ 1438.116368][ T3279] loop0: detected capacity change from 0 to 32768 [ 1438.156271][ T3279] ERROR: (device loop0): dtSearch: stack overrun! [ 1438.156271][ T3279] [ 1438.166623][ T3279] ERROR: (device loop0): remounting filesystem as read-only [ 1438.177128][ T3279] btstack dump: [ 1438.181236][ T3279] bn = 0, index = 4 [ 1438.185080][ T3279] bn = 0, index = 4 [ 1438.197214][ T3279] bn = 0, index = 4 [ 1438.201703][ T3279] bn = 0, index = 4 [ 1438.205538][ T3279] bn = 0, index = 4 [ 1438.210102][ T3279] bn = 0, index = 4 [ 1438.214320][ T3279] bn = 0, index = 4 [ 1438.218261][ T3279] bn = 0, index = 0 [ 1438.222188][ T3279] jfs_lookup: dtSearch returned -5 [ 1438.311949][ T6351] usb 3-1: USB disconnect, device number 76 [ 1438.883852][ T3297] loop1: detected capacity change from 0 to 1764 [ 1439.020686][ T3297] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1439.420223][ T3293] syz.0.13442 (3293): drop_caches: 2 [ 1439.450067][ T3315] loop1: detected capacity change from 0 to 164 [ 1439.659844][ T3319] loop2: detected capacity change from 0 to 1024 [ 1439.788085][ T28] audit: type=1800 audit(2000004994.163:271): pid=3319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13456" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 1439.874258][T31158] hfsplus: b-tree write err: -5, ino 25 [ 1439.903286][T31158] hfsplus: b-tree write err: -5, ino 4 [ 1439.908940][T31158] hfsplus: b-tree write err: -5, ino 2 [ 1439.958106][ T3329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13462'. [ 1440.269927][ T3343] syz.1.13467 (3343): drop_caches: 2 [ 1440.306431][ T3345] loop2: detected capacity change from 0 to 128 [ 1440.312589][ T3347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13470'. [ 1440.326956][ T3347] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1440.648829][ T6351] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 1440.850852][ T6351] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.873730][ T6351] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1440.902306][ T6351] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1440.943841][ T6351] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1440.971526][ T6351] usb 2-1: string descriptor 0 read error: -22 [ 1440.981771][ T6351] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1440.998787][ T6351] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1441.028454][ T6351] usb 2-1: 0:2 : does not exist [ 1441.054666][ T6351] usb-storage 2-1:1.1: USB Mass Storage device detected [ 1441.140995][ T3388] loop0: detected capacity change from 0 to 16 [ 1441.155813][ T3388] erofs: (device loop0): mounted with root inode @ nid 36. [ 1441.167957][ T3388] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 1441.425582][ T6351] us122l: couldn't allocate write buffer [ 1441.452583][ T6351] snd-usb-us122l: probe of 2-1:1.1 failed with error -22 [ 1441.478609][ T6351] usb 2-1: USB disconnect, device number 70 [ 1441.594801][ T3402] netlink: 'syz.2.13493': attribute type 9 has an invalid length. [ 1441.617080][ T3402] netlink: 911 bytes leftover after parsing attributes in process `syz.2.13493'. [ 1441.822977][ T3412] netlink: 'syz.2.13497': attribute type 15 has an invalid length. [ 1441.850049][ T3412] netlink: 666 bytes leftover after parsing attributes in process `syz.2.13497'. [ 1441.923028][ T3415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1442.497031][ T3441] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 1442.936169][ T3464] loop1: detected capacity change from 0 to 256 [ 1443.593469][ T1188] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1443.782637][ T3472] loop2: detected capacity change from 0 to 32768 [ 1443.785716][ T1188] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1443.793714][ T3472] XFS: noikeep mount option is deprecated. [ 1443.840076][ T1188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.857169][ T3472] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1443.884288][ T1188] usb 4-1: Product: syz [ 1443.890371][ T1188] usb 4-1: Manufacturer: syz [ 1443.902864][ T1188] usb 4-1: SerialNumber: syz [ 1443.913428][ T3504] x_tables: unsorted entry at hook 2 [ 1443.941588][ T1188] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1444.039273][ T8] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1444.095718][ T3472] XFS (loop2): Ending clean mount [ 1444.113932][ T3472] XFS (loop2): Quotacheck needed: Please wait. [ 1444.208671][ T3472] XFS (loop2): Quotacheck: Done. [ 1444.343576][ T6366] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1444.601628][ T8369] usb 4-1: USB disconnect, device number 77 [ 1445.047617][ T8] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1445.055638][ T8] ath9k_htc: Failed to initialize the device [ 1445.082751][ T8369] usb 4-1: ath9k_htc: USB layer deinitialized [ 1445.163840][ T27] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1445.186067][ T3543] loop3: detected capacity change from 0 to 64 [ 1445.247583][ T3543] syz.3.13559: attempt to access beyond end of device [ 1445.247583][ T3543] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1445.261811][ T3543] buffer_io_error: 14 callbacks suppressed [ 1445.261827][ T3543] Buffer I/O error on dev loop3, logical block 134217734, lost async page write [ 1445.347495][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 1445.373612][ T27] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1445.382134][ T27] usb 2-1: config 179 has no interface number 0 [ 1445.395829][ T27] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1445.408419][ T27] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1445.447787][ T27] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1445.460607][ T27] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1445.472727][ T27] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1445.476665][ T6401] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1445.487053][ T27] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1445.487097][ T27] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1445.487119][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.524467][ T3549] loop3: detected capacity change from 0 to 256 [ 1445.542710][ T27] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input72 [ 1445.588147][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1445.594625][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1445.654541][ T5124] input input72: unable to receive magic message: -110 [ 1445.727884][ T5124] input input72: unable to receive magic message: -32 [ 1445.736945][ T6401] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.756508][ T6401] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1445.804048][ T6401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.834418][ T5124] input input72: unable to receive magic message: -32 [ 1445.887837][ T6401] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1445.930752][ T5124] input input72: unable to receive magic message: -32 [ 1445.989618][ T5124] input input72: unable to receive magic message: -32 [ 1446.096303][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1446.105701][ T8369] usb 2-1: USB disconnect, device number 71 [ 1446.113351][ T8369] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1446.494131][ T3572] loop2: detected capacity change from 0 to 128 [ 1446.912452][ T6401] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 1447.008182][ T3588] netlink: 'syz.2.13580': attribute type 3 has an invalid length. [ 1447.124511][ T6401] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1447.143115][ T6401] stv0680 1-1:4.0: last error: 86, command = 0x70 [ 1447.170727][ T6401] usb 1-1: USB disconnect, device number 84 [ 1447.347407][ T3602] devpts: called with bogus options [ 1448.076629][ T27] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1448.099392][ T3634] netlink: 'syz.1.13603': attribute type 6 has an invalid length. [ 1448.225165][ T3636] loop2: detected capacity change from 0 to 2048 [ 1448.279996][ T3636] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1448.282928][ T27] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1448.314436][ T27] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1448.331953][ T27] usb 4-1: Product: syz [ 1448.347358][ T27] usb 4-1: SerialNumber: syz [ 1448.360439][ T27] usb 4-1: config 0 descriptor?? [ 1448.572075][ T27] hso 4-1:0.0: Can't find BULK IN endpoint [ 1448.699408][ T3644] No such timeout policy "syz0" [ 1448.761484][ T3630] loop0: detected capacity change from 0 to 32768 [ 1448.771506][ T27] usb 4-1: USB disconnect, device number 78 [ 1448.829814][ T3630] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1448.939792][ T3630] XFS (loop0): Ending clean mount [ 1448.952641][ T3640] loop1: detected capacity change from 0 to 32768 [ 1448.976627][ T3640] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.13606 (3640) [ 1448.976885][ T3630] XFS (loop0): Quotacheck needed: Please wait. [ 1449.005762][ T3640] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1449.024066][ T3640] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1449.034122][ T3640] BTRFS info (device loop1): force zlib compression, level 3 [ 1449.063400][ T3640] BTRFS info (device loop1): force clearing of disk cache [ 1449.097008][ T3640] BTRFS info (device loop1): setting nodatasum [ 1449.098669][ T3630] XFS (loop0): Quotacheck: Done. [ 1449.121362][ T3640] BTRFS info (device loop1): allowing degraded mounts [ 1449.167841][ T3640] BTRFS info (device loop1): enabling disk space caching [ 1449.174943][ T3640] BTRFS info (device loop1): disk space caching is enabled [ 1449.277669][ T6372] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1449.394653][ T3640] BTRFS info (device loop1): auto enabling async discard [ 1449.416823][ T3678] loop2: detected capacity change from 0 to 128 [ 1449.458415][ T3678] FAT-fs (loop2): Directory bread(block 32) failed [ 1449.461407][ T3640] BTRFS info (device loop1): rebuilding free space tree [ 1449.465204][ T3678] FAT-fs (loop2): Directory bread(block 33) failed [ 1449.485173][ T3678] FAT-fs (loop2): Directory bread(block 34) failed [ 1449.491841][ T3678] FAT-fs (loop2): Directory bread(block 35) failed [ 1449.506679][ T3678] FAT-fs (loop2): Directory bread(block 36) failed [ 1449.559152][ T3678] FAT-fs (loop2): Directory bread(block 37) failed [ 1449.565874][ T3678] FAT-fs (loop2): Directory bread(block 38) failed [ 1449.628354][ T3640] BTRFS info (device loop1): disabling free space tree [ 1449.630531][ T3678] FAT-fs (loop2): Directory bread(block 39) failed [ 1449.646001][ T3678] FAT-fs (loop2): Directory bread(block 40) failed [ 1449.647427][ T3640] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1449.661558][ T3678] FAT-fs (loop2): Directory bread(block 41) failed [ 1449.698889][ T3640] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1449.953564][ T3678] FAT-fs (loop2): Filesystem has been set read-only [ 1449.966932][ T6374] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1450.748277][ T3703] loop1: detected capacity change from 0 to 256 [ 1450.781167][ T3705] loop2: detected capacity change from 0 to 256 [ 1450.788833][ T3705] exfat: Deprecated parameter 'utf8' [ 1450.821224][ T3703] exfat: Deprecated parameter 'utf8' [ 1450.882686][ T3705] exfat: Deprecated parameter 'namecase' [ 1450.888821][ T3703] exfat: Deprecated parameter 'namecase' [ 1450.900829][ T3709] cgroup: subsys name conflicts with all [ 1450.960948][ T3705] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8b6193f0, utbl_chksum : 0xe619d30d) [ 1450.973356][ T3703] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xda15a085, utbl_chksum : 0xe619d30d) [ 1451.422728][ T3717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13632'. [ 1451.442044][ T3717] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1136) [ 1451.501186][ T3717] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 1451.672751][ T3723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13635'. [ 1451.922745][ T3707] loop0: detected capacity change from 0 to 32768 [ 1451.954907][ T3707] (syz.0.13627,3707,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1452.012260][ T3707] (syz.0.13627,3707,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1452.117210][ T3734] loop3: detected capacity change from 0 to 256 [ 1452.133908][ T3707] JBD2: Ignoring recovery information on journal [ 1452.296091][ T3707] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1452.680476][ T6372] ocfs2: Unmounting device (7,0) on (node local) [ 1453.020129][ T3760] xt_ipcomp: unknown flags 12 [ 1453.128499][ T1188] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1453.333457][ T1188] usb 3-1: Using ep0 maxpacket: 32 [ 1453.351004][ T1188] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1453.364584][ T1188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.393117][ T1188] usb 3-1: config 0 descriptor?? [ 1453.402905][ T1188] as10x_usb: device has been detected [ 1453.451119][ T1188] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1453.514228][ T1188] usb 3-1: DVB: registering adapter 4 frontend 0 (nBox DVB-T Dongle)... [ 1453.595747][ T1188] as10x_usb: error during firmware upload part1 [ 1453.637132][ T1188] Registered device nBox DVB-T Dongle [ 1453.645954][ T1188] usb 3-1: USB disconnect, device number 77 [ 1453.747333][ T1188] Unregistered device nBox DVB-T Dongle [ 1453.754454][ T1188] as10x_usb: device has been disconnected [ 1453.850897][ T28] audit: type=1326 audit(2000005009.248:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3784 comm="syz.1.13664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4c59c799 code=0x7ffc0000 [ 1453.932395][ T28] audit: type=1326 audit(2000005009.248:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3784 comm="syz.1.13664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4c59c799 code=0x7ffc0000 [ 1453.970757][ T28] audit: type=1326 audit(2000005009.248:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3784 comm="syz.1.13664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fef4c59c799 code=0x7ffc0000 [ 1453.999524][ T28] audit: type=1326 audit(2000005009.248:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3784 comm="syz.1.13664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4c59c799 code=0x7ffc0000 [ 1454.053482][ T28] audit: type=1326 audit(2000005009.248:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3784 comm="syz.1.13664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4c59c799 code=0x7ffc0000 [ 1454.184991][ T3797] Sensor A: ================= START STATUS ================= [ 1454.222416][ T3797] Sensor A: Test Pattern: 75% Colorbar [ 1454.242957][ T3797] Sensor A: Show Information: All [ 1454.249045][ T3797] Sensor A: Vertical Flip: false [ 1454.254253][ T3797] Sensor A: Horizontal Flip: true [ 1454.265416][ T3801] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13672'. [ 1454.277084][ T3797] Sensor A: Brightness: 128 [ 1454.281703][ T3797] Sensor A: Contrast: 128 [ 1454.286989][ T3797] Sensor A: Hue: 0 [ 1454.290969][ T3797] Sensor A: Saturation: 128 [ 1454.296620][ T3797] Sensor A: ================== END STATUS ================== [ 1454.487586][ T3805] loop2: detected capacity change from 0 to 2048 [ 1454.537183][ T3805] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1454.722636][ T3805] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 1454.753639][ T3805] UDF-fs: error (device loop2): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 1455.355277][ T3837] loop3: detected capacity change from 0 to 1024 [ 1455.516205][ T3844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13693'. [ 1456.182870][ T3866] loop2: detected capacity change from 0 to 8192 [ 1456.288320][ T3876] netlink: 'syz.0.13709': attribute type 153 has an invalid length. [ 1456.321392][ T3876] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.13709'. [ 1456.493705][ T8] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1456.501925][ T3878] loop1: detected capacity change from 0 to 4096 [ 1456.708732][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1456.730309][ T8] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1456.743146][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.765711][ T8] usb 4-1: Product: syz [ 1456.769941][ T8] usb 4-1: Manufacturer: syz [ 1456.788307][ T8] usb 4-1: SerialNumber: syz [ 1456.803504][ T8] usb 4-1: config 0 descriptor?? [ 1456.827951][ T8] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1456.865714][ T27] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1457.062657][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 1457.074959][ T27] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1457.083835][ T27] usb 3-1: config 0 has no interface number 0 [ 1457.102444][ T27] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1457.116436][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.133975][ T27] usb 3-1: Product: syz [ 1457.144330][ T27] usb 3-1: Manufacturer: syz [ 1457.152088][ T27] usb 3-1: SerialNumber: syz [ 1457.165398][ T27] usb 3-1: config 0 descriptor?? [ 1457.240632][ T8] ssu100: probe of 4-1:0.0 failed with error -71 [ 1457.266050][ T8] usb 4-1: USB disconnect, device number 79 [ 1457.385781][ T27] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 1457.392927][ T3904] loop1: detected capacity change from 0 to 4096 [ 1457.417379][ T27] usb 3-1: No valid video chain found. [ 1457.437397][ T27] usb 3-1: USB disconnect, device number 78 [ 1457.468479][ T3908] tmpfs: Bad value for 'mpol' [ 1457.543460][ T3904] ntfs3: loop1: ino=5, "/" directory corrupted [ 1457.565176][ T3904] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1457.583703][ T3910] tc_dump_action: action bad kind [ 1457.788237][ T3916] ptrace attach of "./syz-executor exec"[6374] was attempted by ""[3916] [ 1458.045337][ T3924] overlayfs: missing 'lowerdir' [ 1459.029897][ T3962] dlm: no locking on control device [ 1459.094099][ T3966] loop0: detected capacity change from 0 to 16 [ 1459.102492][ T3966] erofs: (device loop0): mounted with root inode @ nid 36. [ 1459.637026][ T3984] batadv0: entered promiscuous mode [ 1459.646069][ T3984] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1459.913754][ T27] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1460.109890][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 1460.117146][ T27] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1460.142789][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.171994][ T27] usb 4-1: config 0 descriptor?? [ 1460.196268][ T27] as10x_usb: device has been detected [ 1460.208926][ T27] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1460.281584][ T27] usb 4-1: DVB: registering adapter 4 frontend 0 (nBox DVB-T Dongle)... [ 1460.336698][ T27] as10x_usb: error during firmware upload part1 [ 1460.355181][ T27] Registered device nBox DVB-T Dongle [ 1460.507445][ T27] usb 4-1: USB disconnect, device number 80 [ 1460.623182][ T4016] xt_l2tp: wrong L2TP version: 0 [ 1460.626841][ T3998] loop0: detected capacity change from 0 to 32768 [ 1460.632698][ T27] Unregistered device nBox DVB-T Dongle [ 1460.640236][ T27] as10x_usb: device has been disconnected [ 1460.657039][ T3998] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.13768 (3998) [ 1460.735014][ T3998] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1460.753960][ T3998] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1460.799837][ T3998] BTRFS info (device loop0): force zlib compression, level 3 [ 1460.827257][ T3998] BTRFS info (device loop0): force clearing of disk cache [ 1460.865044][ T3998] BTRFS info (device loop0): setting nodatasum [ 1460.871813][ T3998] BTRFS info (device loop0): use zlib compression, level 3 [ 1460.893755][ T3998] BTRFS info (device loop0): allowing degraded mounts [ 1460.901138][ T3998] BTRFS info (device loop0): enabling disk space caching [ 1460.917230][ T3998] BTRFS info (device loop0): disk space caching is enabled [ 1461.012577][ T4035] vlan1: entered allmulticast mode [ 1461.028367][ T4035] veth0_vlan: entered allmulticast mode [ 1461.056395][ T3998] BTRFS info (device loop0): enabling ssd optimizations [ 1461.069966][ T3998] BTRFS info (device loop0): auto enabling async discard [ 1461.084231][ T3998] BTRFS info (device loop0): rebuilding free space tree [ 1461.108971][ T3998] BTRFS info (device loop0): disabling free space tree [ 1461.116840][ T3998] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1461.127062][ T3998] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1461.219187][ T4044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13785'. [ 1461.274126][ T4048] x_tables: duplicate entry at hook 3 [ 1461.379803][ T3998] BTRFS info (device loop0): balance: start -sprofiles=data|system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=2..9,drange=9223372036854776315..7,vrange=11..8,limit=7..0 [ 1461.480239][ T3998] BTRFS info (device loop0): balance: ended with status: 0 [ 1461.573353][ T6372] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1461.889940][ T6351] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1461.964470][ T4067] netlink: 'syz.1.13795': attribute type 1 has an invalid length. [ 1461.992927][ T4067] netlink: 228 bytes leftover after parsing attributes in process `syz.1.13795'. [ 1462.059646][ T6351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1462.079291][ T6351] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1462.124396][ T6351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1462.165576][ T6351] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1462.209079][ T6351] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1462.253607][ T6351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.261669][ T6351] usb 3-1: Product: syz [ 1462.297164][ T6351] usb 3-1: Manufacturer: syz [ 1462.306832][ T6351] usb 3-1: SerialNumber: syz [ 1462.321625][ T6351] usb 3-1: config 0 descriptor?? [ 1462.351738][ T6351] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 1462.369207][ T4075] loop0: detected capacity change from 0 to 4096 [ 1462.387564][ T4075] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1462.565327][ T6351] scsi host1: usb-storage 3-1:0.0 [ 1462.586556][ T6351] usb 3-1: USB disconnect, device number 79 [ 1462.836481][ T4090] Scaler: ================= START STATUS ================= [ 1462.850041][ T4090] Scaler: ================== END STATUS ================== [ 1463.052557][ T4077] loop3: detected capacity change from 0 to 32768 [ 1463.076262][ T4077] (syz.3.13799,4077,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1463.102163][ T4098] vlan1: entered allmulticast mode [ 1463.129396][ T4098] : entered allmulticast mode [ 1463.135187][ T4077] (syz.3.13799,4077,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1463.192675][ T4077] JBD2: Ignoring recovery information on journal [ 1463.241283][ T4077] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1463.743113][ T6369] ocfs2: Unmounting device (7,3) on (node local) [ 1464.332943][ T4144] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13829'. [ 1464.597728][ T4152] netlink: 'syz.2.13841': attribute type 24 has an invalid length. [ 1464.627284][ T4152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13841'. [ 1464.663160][ T4154] netlink: 'syz.1.13834': attribute type 10 has an invalid length. [ 1464.878583][ T4132] loop0: detected capacity change from 0 to 40427 [ 1464.905572][ T4132] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1464.915089][ T4132] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1464.938195][ T4132] F2FS-fs (loop0): invalid crc value [ 1464.958078][ T4132] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1465.027035][ T4167] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1465.092149][ T4132] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1465.121037][ T4132] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1465.662564][ T28] audit: type=1326 audit(2000005021.919:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4189 comm="syz.3.13853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab279c799 code=0x7ffc0000 [ 1465.747985][ T28] audit: type=1326 audit(2000005021.919:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4189 comm="syz.3.13853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab279c799 code=0x7ffc0000 [ 1465.828763][ T4196] ieee802154 phy0 wpan0: encryption failed: -22 [ 1465.832833][ T28] audit: type=1326 audit(2000005021.919:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4189 comm="syz.3.13853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ffab279c799 code=0x7ffc0000 [ 1465.897986][ T28] audit: type=1326 audit(2000005021.919:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4189 comm="syz.3.13853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab279c799 code=0x7ffc0000 [ 1465.937467][ T4197] loop3: detected capacity change from 0 to 4096 [ 1465.943988][ T28] audit: type=1326 audit(2000005021.919:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4189 comm="syz.3.13853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab279c799 code=0x7ffc0000 [ 1465.991861][ T4197] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1466.552917][ T4222] netlink: 'syz.1.13866': attribute type 1 has an invalid length. [ 1466.619033][ T4227] netlink: 328 bytes leftover after parsing attributes in process `syz.0.13867'. [ 1466.657567][ T4231] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13869'. [ 1466.984838][ T4243] loop0: detected capacity change from 0 to 64 [ 1467.360308][ T4226] loop3: detected capacity change from 0 to 32768 [ 1467.397420][ T4253] netlink: 460 bytes leftover after parsing attributes in process `syz.0.13879'. [ 1467.491729][ T4226] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 1467.544101][ T4241] loop2: detected capacity change from 0 to 32768 [ 1467.555792][ T4226] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1467.568745][ T4241] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.13874 (4241) [ 1467.620407][ T4241] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1467.644389][ T4241] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1467.655485][ T4241] BTRFS info (device loop2): force zlib compression, level 3 [ 1467.663583][ T4241] BTRFS info (device loop2): force clearing of disk cache [ 1467.671271][ T4241] BTRFS info (device loop2): setting nodatasum [ 1467.677746][ T4241] BTRFS info (device loop2): use zlib compression, level 3 [ 1467.685635][ T4241] BTRFS info (device loop2): allowing degraded mounts [ 1467.692832][ T4241] BTRFS info (device loop2): enabling disk space caching [ 1467.701045][ T4241] BTRFS info (device loop2): disk space caching is enabled [ 1467.799351][ T4226] XFS (loop3): Ending clean mount [ 1467.814159][ T4226] XFS (loop3): Quotacheck needed: Please wait. [ 1467.856173][ T4241] BTRFS info (device loop2): enabling ssd optimizations [ 1467.905980][ T4241] BTRFS info (device loop2): auto enabling async discard [ 1467.943860][ T4241] BTRFS info (device loop2): rebuilding free space tree [ 1467.995451][ T4226] XFS (loop3): Quotacheck: Done. [ 1468.011600][ T4241] BTRFS info (device loop2): disabling free space tree [ 1468.070504][ T4241] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1468.100744][ T4241] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1468.262508][ T6369] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1468.359368][ T4241] BTRFS info (device loop2): balance: start -sprofiles=data|system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=2..9,drange=9223372036854776315..7,vrange=11..8,limit=7..0 [ 1468.385036][ T4241] BTRFS info (device loop2): balance: ended with status: 0 [ 1468.637679][ T6366] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1468.707310][ T4305] netlink: 'syz.0.13895': attribute type 12 has an invalid length. [ 1469.302091][ T4327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13904'. [ 1469.495607][ T6351] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1469.685639][ T6351] usb 2-1: Using ep0 maxpacket: 8 [ 1469.700514][ T6351] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.719347][ T6351] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 1469.758977][ T6351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.779784][ T6351] usb 2-1: config 0 descriptor?? [ 1469.936923][ T4348] qrtr: Invalid version 0 [ 1470.073037][ T6351] usb 2-1: USB disconnect, device number 72 [ 1470.178668][ T4331] loop0: detected capacity change from 0 to 32768 [ 1470.195021][ T4331] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.13906 (4331) [ 1470.229583][ T4331] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1470.242116][ T4331] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1470.251826][ T4331] BTRFS info (device loop0): force clearing of disk cache [ 1470.286527][ T4331] BTRFS info (device loop0): metadata ratio 0 [ 1470.301829][ T4331] BTRFS info (device loop0): enabling ssd optimizations [ 1470.326569][ T4331] BTRFS info (device loop0): using spread ssd allocation scheme [ 1470.334501][ T4331] BTRFS info (device loop0): using free space tree [ 1470.492865][ T4331] BTRFS info (device loop0): auto enabling async discard [ 1470.524433][ T4331] BTRFS info (device loop0): rebuilding free space tree [ 1470.757801][ T4385] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1470.827501][ T6372] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1470.942591][ T4391] loop1: detected capacity change from 0 to 512 [ 1470.972029][ T4391] EXT4-fs: inline encryption not supported [ 1471.000476][ T4391] EXT4-fs: Ignoring removed mblk_io_submit option [ 1471.051381][ T4391] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1471.105843][ T4391] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1471.171642][ T4391] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1471.191320][ T4391] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.13927: inode #13: comm syz.1.13927: iget: illegal inode # [ 1471.210111][ T4391] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.13927: couldn't read orphan inode 13 (err -117) [ 1471.282063][ T4391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1471.323894][ T4404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13933'. [ 1471.335225][ C0] vkms_vblank_simulate: vblank timer overrun [ 1471.361757][ T4404] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1471.403864][ T4391] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1471.421804][ T4391] EXT4-fs error (device loop1): __ext4_remount:6752: comm syz.1.13927: Abort forced by user [ 1471.476328][ T4391] EXT4-fs (loop1): Remounting filesystem read-only [ 1471.499658][ T4391] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1471.735065][ T6374] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.884620][ T4417] loop0: detected capacity change from 0 to 4096 [ 1471.928003][ T4417] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1472.076640][ T4425] loop2: detected capacity change from 0 to 4096 [ 1472.080607][ T4427] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1472.092642][ T4417] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1472.100525][ T4425] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1472.113625][ T4427] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1472.130754][ T4417] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 1472.174666][ T4429] loop3: detected capacity change from 0 to 256 [ 1472.265620][ T4429] FAT-fs (loop3): Directory bread(block 64) failed [ 1472.275142][ T4429] FAT-fs (loop3): Directory bread(block 65) failed [ 1472.302623][ T4429] FAT-fs (loop3): Directory bread(block 66) failed [ 1472.320279][ T4429] FAT-fs (loop3): Directory bread(block 67) failed [ 1472.327189][ T4429] FAT-fs (loop3): Directory bread(block 68) failed [ 1472.335334][ T4429] FAT-fs (loop3): Directory bread(block 69) failed [ 1472.385576][ T4429] FAT-fs (loop3): Directory bread(block 70) failed [ 1472.425911][ T4429] FAT-fs (loop3): Directory bread(block 71) failed [ 1472.459486][ T4429] FAT-fs (loop3): Directory bread(block 72) failed [ 1472.466086][ T4429] FAT-fs (loop3): Directory bread(block 73) failed [ 1472.682509][ T4439] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13949'. [ 1472.714612][ T4439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13949'. [ 1472.931088][ T4449] loop0: detected capacity change from 0 to 16 [ 1472.961078][ T4449] erofs: (device loop0): mounted with root inode @ nid 36. [ 1472.995644][ T4449] syz.0.13955: attempt to access beyond end of device [ 1472.995644][ T4449] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1473.015934][ T4449] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -6 in[63, 4033] out[4096] [ 1473.052444][ T28] audit: type=1800 audit(2000005029.848:282): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13955" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1473.250411][ T4459] ceph: No source [ 1473.410597][ T27] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1473.587209][ T4469] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1473.600491][ T27] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 1473.611296][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.632997][ T4471] loop3: detected capacity change from 0 to 256 [ 1473.639499][ T27] usb 2-1: config 0 descriptor?? [ 1473.667512][ T4447] loop2: detected capacity change from 0 to 32768 [ 1473.705726][ T4447] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1473.855553][ T4483] netlink: 'syz.0.13968': attribute type 1 has an invalid length. [ 1473.903154][ T27] snd-usb-hiface: probe of 2-1:0.0 failed with error -22 [ 1473.995809][ T4447] XFS (loop2): Ending clean mount [ 1474.112865][ T8] usb 2-1: USB disconnect, device number 73 [ 1474.129200][ T28] audit: type=1400 audit(2000005031.007:283): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=4486 comm="syz.0.13969" [ 1474.148535][ C0] vkms_vblank_simulate: vblank timer overrun [ 1474.170465][ T6366] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1474.255256][ T4491] openvswitch: netlink: Actions may not be safe on all matching packets [ 1474.837906][ T4500] loop3: detected capacity change from 0 to 4096 [ 1474.867496][ T4500] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1475.008758][ T4500] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1475.027878][ T4500] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1475.209146][ T4517] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4294967295 out of range (51000000..2150000000) [ 1475.610168][ T6351] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1475.627776][ T4510] loop1: detected capacity change from 0 to 32768 [ 1475.648664][ T4510] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.13979 (4510) [ 1475.679256][ T4510] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1475.689765][ T4510] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1475.702847][ T4510] BTRFS info (device loop1): force zlib compression, level 3 [ 1475.710374][ T4510] BTRFS info (device loop1): force clearing of disk cache [ 1475.720626][ T4510] BTRFS info (device loop1): setting nodatasum [ 1475.727180][ T4510] BTRFS info (device loop1): use zlib compression, level 3 [ 1475.736874][ T4510] BTRFS info (device loop1): allowing degraded mounts [ 1475.746349][ T4510] BTRFS info (device loop1): enabling disk space caching [ 1475.754471][ T4510] BTRFS info (device loop1): disk space caching is enabled [ 1475.800027][ T6351] usb 3-1: config index 0 descriptor too short (expected 57635, got 36) [ 1475.819095][ T6351] usb 3-1: config 1 has an invalid interface number: 188 but max is 0 [ 1475.833883][ T27] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1475.851750][ T6351] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.881027][ T4510] BTRFS info (device loop1): enabling ssd optimizations [ 1475.888440][ T6351] usb 3-1: config 1 has no interface number 0 [ 1475.909962][ T4510] BTRFS info (device loop1): auto enabling async discard [ 1475.920437][ T6351] usb 3-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1475.925163][ T4526] loop3: detected capacity change from 0 to 32768 [ 1475.950848][ T4510] BTRFS info (device loop1): rebuilding free space tree [ 1475.966652][ T6351] usb 3-1: config 1 interface 188 has no altsetting 0 [ 1475.981396][ T6351] usb 3-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 1475.992717][ T4510] BTRFS info (device loop1): disabling free space tree [ 1475.997960][ T6351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.000847][ T4510] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1476.008158][ T6351] usb 3-1: Product: syz [ 1476.028900][ T6351] usb 3-1: Manufacturer: syz [ 1476.033556][ T6351] usb 3-1: SerialNumber: syz [ 1476.043651][ T4510] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1476.054176][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 1476.068083][ T4526] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1476.077718][ T27] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 1476.109639][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.161955][ T27] usb 1-1: Product: syz [ 1476.172589][ T4510] BTRFS info (device loop1): balance: start -sprofiles=data|system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=2..9,drange=9223372036854776315..7,vrange=11..8,limit=7..0 [ 1476.176433][ T4526] XFS (loop3): Ending clean mount [ 1476.205573][ T27] usb 1-1: Manufacturer: syz [ 1476.211749][ T27] usb 1-1: SerialNumber: syz [ 1476.215634][ T4510] BTRFS info (device loop1): balance: ended with status: 0 [ 1476.241376][ T27] usb 1-1: config 0 descriptor?? [ 1476.284751][ T6351] usb 3-1: unknown interface protocol 0xc1, assuming v1 [ 1476.292916][ T6351] usb 3-1: 188:0 : does not exist [ 1476.320737][ T27] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1476.343740][ T6351] usb 3-1: USB disconnect, device number 80 [ 1476.394779][ T6374] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1476.447441][ T6369] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1476.673686][ T27] gspca_m5602: Failed to find a sensor [ 1476.679468][ T27] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 1476.722092][ T27] usb 1-1: USB disconnect, device number 85 [ 1477.182374][ T4565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13994'. [ 1477.217477][ T4565] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13994'. [ 1477.433640][ T28] audit: type=1326 audit(2000005034.547:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.0.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd82b9c799 code=0x7ffc0000 [ 1477.504425][ T28] audit: type=1326 audit(2000005034.547:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.0.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd82b9c799 code=0x7ffc0000 [ 1477.576520][ T28] audit: type=1326 audit(2000005034.547:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.0.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7efd82b9c799 code=0x7ffc0000 [ 1477.647603][ T28] audit: type=1326 audit(2000005034.547:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.0.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd82b9c799 code=0x7ffc0000 [ 1477.709784][ T28] audit: type=1326 audit(2000005034.547:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.0.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd82b9c799 code=0x7ffc0000 [ 1478.058025][ T4596] loop3: detected capacity change from 0 to 1024 [ 1478.267893][ T59] hfsplus: b-tree write err: -5, ino 25 [ 1478.273684][ T59] hfsplus: b-tree write err: -5, ino 4 [ 1478.311206][ T59] hfsplus: b-tree write err: -5, ino 2 [ 1478.382008][ T4608] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14016'. [ 1478.601853][ T4617] loop1: detected capacity change from 0 to 1024 [ 1478.644496][ T4617] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1478.704104][ T4617] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1478.739915][ T4617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1478.922323][ T6374] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1478.931666][ T27] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1478.947761][ T4632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14026'. [ 1479.114078][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 1479.128170][ T27] usb 1-1: config 1 has an invalid interface number: 108 but max is 0 [ 1479.140613][ T27] usb 1-1: config 1 has no interface number 0 [ 1479.163464][ T27] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1479.201451][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.225273][ T27] usb 1-1: Product: syz [ 1479.235427][ T27] usb 1-1: Manufacturer: syz [ 1479.244322][ T27] usb 1-1: SerialNumber: syz [ 1479.274660][ T27] hub 1-1:1.108: bad descriptor, ignoring hub [ 1479.280893][ T27] hub: probe of 1-1:1.108 failed with error -5 [ 1479.423177][ T4649] netlink: 'syz.1.14033': attribute type 15 has an invalid length. [ 1479.487296][ T27] usb 1-1: palm_os_4_probe - error -71 getting connection info [ 1479.495023][ T27] visor 1-1:1.108: Handspring Visor / Palm OS converter detected [ 1479.536012][ T27] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1479.553131][ T27] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1479.592011][ T27] usb 1-1: USB disconnect, device number 86 [ 1479.622721][ T27] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1479.697927][ T27] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1479.708637][ T27] visor 1-1:1.108: device disconnected [ 1479.785694][ T6401] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1479.811487][ T4662] netlink: 'syz.2.14040': attribute type 21 has an invalid length. [ 1479.820199][ T4662] netlink: 164 bytes leftover after parsing attributes in process `syz.2.14040'. [ 1479.934675][ T4667] loop1: detected capacity change from 0 to 256 [ 1479.948927][ T4667] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1479.955687][ T4665] loop2: detected capacity change from 0 to 2048 [ 1479.975595][ T4667] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 1479.990678][ T6401] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1479.999622][ T6401] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1480.013920][ T4665] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1480.043293][ T6401] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.065376][ T6401] usb 4-1: config 220 has no interface number 2 [ 1480.071739][ T6401] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1480.089350][ T6401] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1480.097036][ T6401] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1480.125656][ T6401] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1480.149483][ T6401] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1480.176951][ T6401] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.185090][ T6401] usb 4-1: Product: syz [ 1480.233226][ T6401] usb 4-1: Manufacturer: syz [ 1480.237981][ T6401] usb 4-1: SerialNumber: syz [ 1480.409631][ T4676] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1480.470745][ T6401] usb 4-1: selecting invalid altsetting 0 [ 1480.480511][ T6401] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1480.493630][ T6401] usb 4-1: No valid video chain found. [ 1480.505546][ T6401] usb 4-1: selecting invalid altsetting 0 [ 1480.517382][ T6401] usbtest: probe of 4-1:220.1 failed with error -22 [ 1480.568409][ T6401] usb 4-1: USB disconnect, device number 81 [ 1480.731454][ T4687] loop1: detected capacity change from 0 to 512 [ 1480.831414][ T4687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1480.857594][ T4687] ext4 filesystem being mounted at /3368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1481.054690][ T4702] loop2: detected capacity change from 0 to 256 [ 1481.116511][ T6374] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1481.212995][ T4706] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 1481.541714][ T4718] loop3: detected capacity change from 0 to 512 [ 1481.605490][ T4718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1481.605632][ T4718] ext4 filesystem being mounted at /3314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1481.791775][ T6369] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1482.236910][ T27] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1482.365294][ T4746] loop1: detected capacity change from 0 to 4096 [ 1482.379534][ T4746] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 1482.424308][ T27] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 1482.439390][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.467856][ T27] usb 3-1: config 0 descriptor?? [ 1482.582476][ T4752] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.14081'. [ 1482.703883][ T27] snd-usb-hiface: probe of 3-1:0.0 failed with error -22 [ 1482.908742][ T3363] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1482.931988][ T8369] usb 3-1: USB disconnect, device number 81 [ 1483.075395][ T27] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1483.113991][ T3363] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1483.129692][ T3363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.153179][ T3363] usb 4-1: Product: syz [ 1483.170686][ T3363] usb 4-1: Manufacturer: syz [ 1483.175527][ T3363] usb 4-1: SerialNumber: syz [ 1483.200400][ T3363] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1483.226287][ T8369] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1483.274211][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1483.302474][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.331776][ T27] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1483.350783][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.381849][ T27] usb 2-1: config 0 descriptor?? [ 1483.412323][ T27] xbox_remote_probe: endpoint_in message size==0? [ 1483.620267][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 1483.636681][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 1483.648133][ T27] usb 2-1: USB disconnect, device number 74 [ 1483.660428][ T4777] loop0: detected capacity change from 0 to 1024 [ 1483.676958][ T4776] loop2: detected capacity change from 0 to 512 [ 1483.694116][ T4777] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1483.743196][ T1188] usb 4-1: USB disconnect, device number 82 [ 1483.753466][ T4776] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1483.787226][ T4777] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.14089: lblock 2 mapped to illegal pblock 2 (length 1) [ 1483.817625][ T4776] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1483.839931][ T4777] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1483.860935][ T4776] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1483.869377][ T4777] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 48: comm syz.0.14089: lblock 0 mapped to illegal pblock 48 (length 1) [ 1483.886686][ T4776] System zones: 0-1, 15-15, 18-18, 34-34 [ 1483.888017][ T4777] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1483.892713][ T4776] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1483.908162][ T4776] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1483.917711][ T4776] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1483.937804][ T4777] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.14089: Failed to acquire dquot type 0 [ 1483.951626][ T4776] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1483.957156][ T4777] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1483.968882][ T4777] EXT4-fs error (device loop0): ext4_evict_inode:252: inode #11: comm syz.0.14089: mark_inode_dirty error [ 1483.980695][ T4776] EXT4-fs (loop2): 1 truncate cleaned up [ 1483.987532][ T4776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1483.997739][ T4777] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 1484.036879][ T4777] EXT4-fs (loop0): 1 orphan inode deleted [ 1484.043993][ T4777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1484.067641][ T2888] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1484.116062][ T2888] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1484.126754][ T4776] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 1484.141855][ T2888] EXT4-fs error (device loop0): ext4_release_dquot:6985: comm kworker/u4:7: Failed to release dquot type 0 [ 1484.242531][ T6366] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1484.292863][ T8369] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1484.303819][ T6372] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1484.326001][ T8369] ath9k_htc: Failed to initialize the device [ 1484.338865][ T2888] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1484.365907][ T1188] usb 4-1: ath9k_htc: USB layer deinitialized [ 1484.391468][ T2888] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1484.415020][ T2888] EXT4-fs error (device loop0): ext4_release_dquot:6985: comm kworker/u4:7: Failed to release dquot type 0 [ 1484.474104][ T6372] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1484.539589][ T6372] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1484.601067][ T6372] EXT4-fs error (device loop0): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 1484.616090][ T4800] loop3: detected capacity change from 0 to 164 [ 1484.744215][ T28] audit: type=1326 audit(2000005042.390:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.1.14097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4c59c799 code=0x7ffc0000 [ 1484.767117][ C1] vkms_vblank_simulate: vblank timer overrun [ 1484.855059][ T28] audit: type=1326 audit(2000005042.390:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.1.14097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4c59c799 code=0x7ffc0000 [ 1484.877911][ C1] vkms_vblank_simulate: vblank timer overrun [ 1484.981340][ T28] audit: type=1326 audit(2000005042.455:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.1.14097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fef4c59c799 code=0x7ffc0000 [ 1485.002326][ T4811] tmpfs: Bad value for 'mpol' [ 1485.003867][ C1] vkms_vblank_simulate: vblank timer overrun [ 1485.122000][ T28] audit: type=1326 audit(2000005042.455:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.1.14097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4c59c799 code=0x7ffc0000 [ 1485.208987][ T28] audit: type=1326 audit(2000005042.455:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.1.14097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4c59c799 code=0x7ffc0000 [ 1485.823486][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14114'. [ 1485.946079][ T8369] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1486.132367][ T8369] usb 3-1: Using ep0 maxpacket: 16 [ 1486.144031][ T8369] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1486.162619][ T8369] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 52, changing to 9 [ 1486.174355][ T8369] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8241, setting to 1024 [ 1486.186931][ T8369] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1486.196474][ T8369] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1486.219527][ T8369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.242919][ T8369] usb 3-1: Product: syz [ 1486.267277][ T8369] usb 3-1: Manufacturer: syz [ 1486.282460][ T8369] usb 3-1: SerialNumber: syz [ 1486.305090][ T8369] usb 3-1: config 0 descriptor?? [ 1486.446442][ T4878] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.14125'. [ 1486.577826][ T8369] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input73 [ 1486.848336][ T8369] usb 3-1: USB disconnect, device number 82 [ 1486.855121][ T5124] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 1486.909526][ T4890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14129'. [ 1487.250472][ T4905] xt_connbytes: Forcing CT accounting to be enabled [ 1487.580282][ T4912] netlink: 'syz.3.14137': attribute type 1 has an invalid length. [ 1487.618569][ T4912] netlink: 244 bytes leftover after parsing attributes in process `syz.3.14137'. [ 1488.259587][ T4938] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1488.826371][ T4959] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14154'. [ 1488.844781][ T4920] loop1: detected capacity change from 0 to 32768 [ 1489.468573][ T4982] netlink: 'syz.1.14159': attribute type 21 has an invalid length. [ 1489.493434][ T4982] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14159'. [ 1489.538764][ T4982] netlink: 'syz.1.14159': attribute type 4 has an invalid length. [ 1489.576891][ T4982] netlink: 3 bytes leftover after parsing attributes in process `syz.1.14159'. [ 1489.896312][ T5002] hsr0: VLAN not yet supported [ 1490.038438][ T6401] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1490.269425][ T6401] usb 2-1: Using ep0 maxpacket: 8 [ 1490.299856][ T6401] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.319986][ T6401] usb 2-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1490.345745][ T6401] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.353971][ T6401] usb 2-1: Product: syz [ 1490.381623][ T6401] usb 2-1: Manufacturer: syz [ 1490.405624][ T6401] usb 2-1: SerialNumber: syz [ 1490.440053][ T6401] usb 2-1: config 0 descriptor?? [ 1490.463617][ T5029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14180'. [ 1490.469210][ T6401] cdc_phonet 2-1:0.0: invalid descriptor buffer length [ 1490.503726][ T6401] cdc_phonet: probe of 2-1:0.0 failed with error -22 [ 1490.558762][ T5031] netlink: 'syz.0.14181': attribute type 13 has an invalid length. [ 1490.646173][ T5034] loop3: detected capacity change from 0 to 8 [ 1490.707814][ T5034] SQUASHFS error: Failed to read block 0x285: -5 [ 1490.741195][ T5034] SQUASHFS error: Unable to read metadata cache entry [283] [ 1490.756856][ T6401] usb 2-1: USB disconnect, device number 75 [ 1490.772353][ T5034] SQUASHFS error: Unable to read symlink [8f:60] [ 1491.204447][ C1] vkms_vblank_simulate: vblank timer overrun [ 1491.388575][ T5058] loop3: detected capacity change from 0 to 2048 [ 1491.484954][ T5058] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1491.557345][ T28] audit: type=1800 audit(2000005049.697:294): pid=5058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14194" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 1491.598699][ T5065] loop2: detected capacity change from 0 to 512 [ 1491.661362][ T5065] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1491.779633][ T5065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1491.818579][ T5065] ext4 filesystem being mounted at /3517/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1491.946226][ T5065] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1491.974136][ T5065] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1492.001737][ T5065] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.14196: Failed to acquire dquot type 1 [ 1492.027041][ T5087] IPv6: Can't replace route, no match found [ 1492.144766][ T6366] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1492.430485][ T5103] loop3: detected capacity change from 0 to 1024 [ 1492.549338][ T5103] hfsplus: trying to free free bnode 0(1) [ 1492.645175][ T2888] hfsplus: b-tree write err: -5, ino 25 [ 1492.677253][ T2888] hfsplus: b-tree write err: -5, ino 4 [ 1492.695296][ T2888] hfsplus: b-tree write err: -5, ino 2 [ 1492.970698][ T5126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14220'. [ 1493.010799][ T5126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14220'. [ 1493.014191][ T5132] netlink: 'syz.2.14222': attribute type 64 has an invalid length. [ 1493.031589][ T5132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14222'. [ 1493.049012][ T5132] netlink: 'syz.2.14222': attribute type 64 has an invalid length. [ 1493.057003][ T5132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14222'. [ 1493.860549][ T5171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14239'. [ 1494.224570][ T5185] loop3: detected capacity change from 0 to 4096 [ 1494.277743][ T5185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1494.367587][ T5188] ip6erspan0: entered allmulticast mode [ 1494.395781][ T5185] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.14247: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1494.443448][ T5185] EXT4-fs error (device loop3): ext4_quota_enable:7143: comm syz.3.14247: Bad quota inode: 3, type: 0 [ 1494.503005][ T5185] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1494.672210][ T6369] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1494.980792][ T5210] loop1: detected capacity change from 0 to 1024 [ 1495.042161][ T5215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14261'. [ 1495.176191][ T5218] netlink: 'syz.3.14263': attribute type 3 has an invalid length. [ 1495.194091][ T5220] netlink: 'syz.2.14264': attribute type 25 has an invalid length. [ 1495.211101][ T5218] netlink: 'syz.3.14263': attribute type 27 has an invalid length. [ 1495.223172][ T5220] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14264'. [ 1496.091696][ T5258] loop0: detected capacity change from 0 to 512 [ 1496.142960][ T5258] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.14283: inode has both inline data and extents flags [ 1496.181401][ T5258] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.14283: couldn't read orphan inode 15 (err -117) [ 1496.195244][ T5258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1496.314221][ T5267] netlink: 'syz.1.14286': attribute type 9 has an invalid length. [ 1496.324099][ T6372] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1496.333846][ T5267] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.14286'. [ 1496.562817][ T5275] vti0: entered promiscuous mode [ 1496.685711][ T5283] netlink: 180 bytes leftover after parsing attributes in process `syz.3.14294'. [ 1497.199872][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14305'. [ 1497.214315][ T27] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1497.241970][ T5307] netlink: 'syz.1.14306': attribute type 4 has an invalid length. [ 1497.340717][ T5309] netlink: 'syz.1.14308': attribute type 1 has an invalid length. [ 1497.400107][ T27] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1497.416573][ T27] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1497.444783][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.485096][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1497.517353][ T27] usb 3-1: config 1 has no interface number 0 [ 1497.530123][ T27] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1497.547528][ T5315] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1497.556364][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.598448][ T27] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1497.810897][ T27] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 1497.830484][ T27] snd_usb_pod 3-1:1.1: invalid control EP [ 1497.836533][ T27] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 1497.860199][ T27] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1497.877540][ T27] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 1497.962876][ T5325] __nla_validate_parse: 1 callbacks suppressed [ 1497.962893][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14315'. [ 1498.041354][ T27] usb 3-1: USB disconnect, device number 83 [ 1498.234887][ T5335] loop0: detected capacity change from 0 to 8 [ 1498.730256][ T5354] netlink: 72 bytes leftover after parsing attributes in process `syz.0.14330'. [ 1498.776634][ T5354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14330'. [ 1498.787325][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14330'. [ 1499.064904][ T5368] loop1: detected capacity change from 0 to 256 [ 1499.090511][ T5368] exfat: Deprecated parameter 'namecase' [ 1499.096249][ T5368] exfat: Deprecated parameter 'namecase' [ 1499.218193][ T5368] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 1499.319010][ T5368] exFAT-fs (loop1): invalid start cluster (4278190088) [ 1499.844567][ T5401] loop2: detected capacity change from 0 to 16 [ 1499.862700][ T5401] erofs: (device loop2): mounted with root inode @ nid 36. [ 1500.038671][ T8] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 1500.223119][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1500.256961][ T8] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1500.273662][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.299575][ T8] usb 1-1: Product: syz [ 1500.309254][ T8] usb 1-1: Manufacturer: syz [ 1500.313915][ T8] usb 1-1: SerialNumber: syz [ 1500.367029][ T8] usb 1-1: config 0 descriptor?? [ 1500.383038][ T8] usbtouchscreen: probe of 1-1:0.0 failed with error -12 [ 1500.514254][ T5425] misc userio: No port type given on /dev/userio [ 1500.632935][ T6401] usb 1-1: USB disconnect, device number 87 [ 1500.719662][ T5431] netlink: 'syz.3.14367': attribute type 10 has an invalid length. [ 1500.805265][ T5431] team0: Port device geneve1 added [ 1500.930455][ T5416] loop2: detected capacity change from 0 to 32768 [ 1500.995429][ T5416] JBD2: Ignoring recovery information on journal [ 1501.085872][ T5416] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1501.419447][ T6366] ocfs2: Unmounting device (7,2) on (node local) [ 1502.034801][ T5481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14388'. [ 1502.041502][ T5482] loop1: detected capacity change from 0 to 256 [ 1502.071822][ T5481] vlan0: entered promiscuous mode [ 1502.089738][ T5481] vlan0: entered allmulticast mode [ 1502.094949][ T5481] veth0_vlan: entered allmulticast mode [ 1502.189459][ T5482] FAT-fs (loop1): Directory bread(block 64) failed [ 1502.228770][ T5482] FAT-fs (loop1): Directory bread(block 65) failed [ 1502.235880][ T5482] FAT-fs (loop1): Directory bread(block 66) failed [ 1502.258258][ T5482] FAT-fs (loop1): Directory bread(block 67) failed [ 1502.265146][ T5482] FAT-fs (loop1): Directory bread(block 68) failed [ 1502.273620][ T5482] FAT-fs (loop1): Directory bread(block 69) failed [ 1502.282895][ T5482] FAT-fs (loop1): Directory bread(block 70) failed [ 1502.301333][ T5482] FAT-fs (loop1): Directory bread(block 71) failed [ 1502.307192][ T5487] syz.2.14392: attempt to access beyond end of device [ 1502.307192][ T5487] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1502.308762][ T5488] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1502.337626][ T5482] FAT-fs (loop1): Directory bread(block 72) failed [ 1502.344358][ T5482] FAT-fs (loop1): Directory bread(block 73) failed [ 1502.366152][ T5488] overlayfs: missing 'lowerdir' [ 1502.538382][ T5490] netlink: 'syz.2.14393': attribute type 10 has an invalid length. [ 1502.624903][ T5490] team0: Port device geneve1 added [ 1502.847322][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1502.853751][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1503.601948][ T5526] netlink: 'syz.0.14409': attribute type 21 has an invalid length. [ 1503.612533][ T5526] netlink: 'syz.0.14409': attribute type 6 has an invalid length. [ 1503.621557][ T5526] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14409'. [ 1503.624502][ T5496] loop3: detected capacity change from 0 to 32768 [ 1503.708091][ T5533] veth3: entered promiscuous mode [ 1503.709208][ T5496] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1503.713584][ T5533] veth3: entered allmulticast mode [ 1503.956317][ T5496] XFS (loop3): Ending clean mount [ 1504.102597][ T5549] netlink: 'syz.1.14416': attribute type 28 has an invalid length. [ 1504.182698][ T6369] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1504.201712][ T5553] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1504.589530][ T5565] ALSA: mixer_oss: invalid OSS volume ';ʸgԊ8\>Pxi9 h~)V' [ 1504.598699][ T5565] ALSA: mixer_oss: invalid OSS volume '*bbX-]OF{T0pc' [ 1504.633693][ T5565] ALSA: mixer_oss: invalid OSS volume 'gI"4-Z' [ 1504.653497][ T5565] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 1504.668264][ T5565] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 1504.694333][ T5565] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 1504.703620][ T5565] ALSA: mixer_oss: invalid OSS volume '"P޸ۜo[8>7|YMepq' [ 1504.742848][ T5565] ALSA: mixer_oss: invalid OSS volume 'wI׷#t\W,bP=&e' [ 1504.752529][ T5565] ALSA: mixer_oss: invalid OSS volume ']za-!)ϻvCYps' [ 1504.774196][ T5565] ALSA: mixer_oss: invalid OSS volume 'LE]Dxt݂OY3fk$T "' [ 1504.782603][ T5565] ALSA: mixer_oss: invalid OSS volume '[' [ 1504.841903][ T28] audit: type=1326 audit(2000005063.966:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz.0.14428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd82b9c799 code=0x7ffc0000 [ 1504.844081][ T5565] ALSA: mixer_oss: invalid OSS volume '3A14IN+|\' [ 1504.882052][ T5565] ALSA: mixer_oss: invalid OSS volume '$magic != lock) [ 1511.107542][ T5784] hfs: request for non-existent node 1025 in B*Tree [ 1511.111825][ T5760] WARNING: CPU: 0 PID: 5760 at kernel/locking/mutex.c:582 __mutex_lock+0xb85/0xcc0 [ 1511.129717][ T5760] Modules linked in: [ 1511.133822][ T5760] CPU: 0 PID: 5760 Comm: syz.1.14512 Not tainted syzkaller #0 [ 1511.141383][ T5760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1511.151505][ T5760] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 1511.152193][ T5784] hfs: request for non-existent node 1025 in B*Tree [ 1511.156979][ T5760] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 14 65 fd 03 00 0f 85 95 f5 ff ff 48 c7 c7 00 b4 ca 8a 48 c7 c6 a0 b4 ca 8a e8 eb 17 c3 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 1511.157002][ T5760] RSP: 0018:ffffc90005217620 EFLAGS: 00010246 [ 1511.157018][ T5760] RAX: f6ef591fabb9dc00 RBX: ffff888027396828 RCX: 0000000000080000 [ 1511.199014][ T5760] RDX: ffffc9000d4db000 RSI: 0000000000007fbe RDI: 0000000000007fbf [ 1511.207155][ T5760] RBP: ffffc90005217780 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 1511.215378][ T5760] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000 [ 1511.223581][ T5760] R13: 1ffff92000a42ed4 R14: dffffc0000000000 R15: 0000000000000000 [ 1511.231677][ T5760] FS: 00007fef4d3a36c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1511.240874][ T5760] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1511.247698][ T5760] CR2: 00007ffaa930f000 CR3: 000000001c246000 CR4: 00000000003506f0 [ 1511.255856][ T5760] Call Trace: [ 1511.259154][ T5760] [ 1511.262249][ T5760] ? tomoyo_path_number_perm+0x217/0x620 [ 1511.267930][ T5760] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1511.273552][ T5760] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1511.279607][ T5760] ? reiserfs_write_lock+0x79/0xd0 [ 1511.284758][ T5760] ? mutex_lock_nested+0x20/0x20 [ 1511.289888][ T5760] reiserfs_write_lock+0x79/0xd0 [ 1511.295042][ T5760] reiserfs_lookup+0x183/0x580 [ 1511.300153][ T5760] ? reiserfs_init_priv_inode+0x1a0/0x1a0 [ 1511.305921][ T5760] ? apparmor_path_mknod+0x1ba/0x240 [ 1511.311468][ T5760] ? inode_permission+0xf3/0x480 [ 1511.316652][ T5760] ? bpf_lsm_inode_create+0x9/0x10 [ 1511.321960][ T5760] ? security_inode_create+0xb7/0x100 [ 1511.327442][ T5760] ? reiserfs_init_priv_inode+0x1a0/0x1a0 [ 1511.333319][ T5760] path_openat+0x10e4/0x3230 [ 1511.338055][ T5760] ? do_filp_open+0x430/0x430 [ 1511.342747][ T5760] ? __virt_addr_valid+0x18c/0x540 [ 1511.348156][ T5760] do_filp_open+0x1f5/0x430 [ 1511.352797][ T5760] ? vfs_tmpfile+0x490/0x490 [ 1511.357490][ T5760] ? _raw_spin_unlock+0x28/0x40 [ 1511.362366][ T5760] ? alloc_fd+0x58f/0x630 [ 1511.366773][ T5760] do_sys_openat2+0x134/0x1d0 [ 1511.371571][ T5760] ? do_sys_open+0xe0/0xe0 [ 1511.376195][ T5760] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1511.382268][ T5760] ? lock_chain_count+0x20/0x20 [ 1511.387229][ T5760] __x64_sys_openat+0x139/0x160 [ 1511.392230][ T5760] do_syscall_64+0x55/0xa0 [ 1511.396763][ T5760] ? clear_bhb_loop+0x40/0x90 [ 1511.401553][ T5760] ? clear_bhb_loop+0x40/0x90 [ 1511.406342][ T5760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1511.412385][ T5760] RIP: 0033:0x7fef4c59c799 [ 1511.416812][ T5760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1511.436849][ T5760] RSP: 002b:00007fef4d3a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1511.445497][ T5760] RAX: ffffffffffffffda RBX: 00007fef4c815fa0 RCX: 00007fef4c59c799 [ 1511.453535][ T5760] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1511.461845][ T5760] RBP: 00007fef4c632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1511.469975][ T5760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1511.478102][ T5760] R13: 00007fef4c816038 R14: 00007fef4c815fa0 R15: 00007ffe5318ac88 [ 1511.486385][ T5760] [ 1511.489433][ T5760] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1511.496731][ T5760] CPU: 0 PID: 5760 Comm: syz.1.14512 Not tainted syzkaller #0 [ 1511.504300][ T5760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1511.514730][ T5760] Call Trace: [ 1511.518034][ T5760] [ 1511.520980][ T5760] dump_stack_lvl+0x18c/0x250 [ 1511.525886][ T5760] ? show_regs_print_info+0x20/0x20 [ 1511.530390][ T5782] loop3: detected capacity change from 0 to 32768 [ 1511.537865][ T5760] ? load_image+0x400/0x400 [ 1511.542409][ T5760] panic+0x2dc/0x730 [ 1511.546489][ T5760] ? bpf_jit_dump+0xd0/0xd0 [ 1511.550992][ T5760] __warn+0x2e0/0x470 [ 1511.554966][ T5760] ? __mutex_lock+0xb85/0xcc0 [ 1511.559647][ T5760] ? __mutex_lock+0xb85/0xcc0 [ 1511.564331][ T5760] report_bug+0x2be/0x4f0 [ 1511.568692][ T5760] ? __mutex_lock+0xb85/0xcc0 [ 1511.573365][ T5760] ? __mutex_lock+0xb85/0xcc0 [ 1511.578119][ T5760] ? __mutex_lock+0xb87/0xcc0 [ 1511.582787][ T5760] handle_bug+0xcf/0x120 [ 1511.587026][ T5760] exc_invalid_op+0x1a/0x50 [ 1511.591538][ T5760] asm_exc_invalid_op+0x1a/0x20 [ 1511.596441][ T5760] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 1511.601726][ T5760] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 14 65 fd 03 00 0f 85 95 f5 ff ff 48 c7 c7 00 b4 ca 8a 48 c7 c6 a0 b4 ca 8a e8 eb 17 c3 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 1511.621429][ T5760] RSP: 0018:ffffc90005217620 EFLAGS: 00010246 [ 1511.627761][ T5760] RAX: f6ef591fabb9dc00 RBX: ffff888027396828 RCX: 0000000000080000 [ 1511.635728][ T5760] RDX: ffffc9000d4db000 RSI: 0000000000007fbe RDI: 0000000000007fbf [ 1511.643911][ T5760] RBP: ffffc90005217780 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 1511.652030][ T5760] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000 [ 1511.660189][ T5760] R13: 1ffff92000a42ed4 R14: dffffc0000000000 R15: 0000000000000000 [ 1511.668454][ T5760] ? tomoyo_path_number_perm+0x217/0x620 [ 1511.674266][ T5760] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1511.679807][ T5760] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1511.685880][ T5760] ? reiserfs_write_lock+0x79/0xd0 [ 1511.691277][ T5760] ? mutex_lock_nested+0x20/0x20 [ 1511.696306][ T5760] reiserfs_write_lock+0x79/0xd0 [ 1511.701235][ T5760] reiserfs_lookup+0x183/0x580 [ 1511.705997][ T5760] ? reiserfs_init_priv_inode+0x1a0/0x1a0 [ 1511.711723][ T5760] ? apparmor_path_mknod+0x1ba/0x240 [ 1511.717099][ T5760] ? inode_permission+0xf3/0x480 [ 1511.722031][ T5760] ? bpf_lsm_inode_create+0x9/0x10 [ 1511.727132][ T5760] ? security_inode_create+0xb7/0x100 [ 1511.732519][ T5760] ? reiserfs_init_priv_inode+0x1a0/0x1a0 [ 1511.738517][ T5760] path_openat+0x10e4/0x3230 [ 1511.743125][ T5760] ? do_filp_open+0x430/0x430 [ 1511.747798][ T5760] ? __virt_addr_valid+0x18c/0x540 [ 1511.753079][ T5760] do_filp_open+0x1f5/0x430 [ 1511.758083][ T5760] ? vfs_tmpfile+0x490/0x490 [ 1511.763460][ T5760] ? _raw_spin_unlock+0x28/0x40 [ 1511.768664][ T5760] ? alloc_fd+0x58f/0x630 [ 1511.773019][ T5760] do_sys_openat2+0x134/0x1d0 [ 1511.777718][ T5760] ? do_sys_open+0xe0/0xe0 [ 1511.782645][ T5760] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1511.788907][ T5760] ? lock_chain_count+0x20/0x20 [ 1511.793853][ T5760] __x64_sys_openat+0x139/0x160 [ 1511.798740][ T5760] do_syscall_64+0x55/0xa0 [ 1511.803602][ T5760] ? clear_bhb_loop+0x40/0x90 [ 1511.808721][ T5760] ? clear_bhb_loop+0x40/0x90 [ 1511.813585][ T5760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1511.819671][ T5760] RIP: 0033:0x7fef4c59c799 [ 1511.824089][ T5760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1511.844310][ T5760] RSP: 002b:00007fef4d3a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1511.853005][ T5760] RAX: ffffffffffffffda RBX: 00007fef4c815fa0 RCX: 00007fef4c59c799 [ 1511.861325][ T5760] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1511.869291][ T5760] RBP: 00007fef4c632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1511.877432][ T5760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1511.885425][ T5760] R13: 00007fef4c816038 R14: 00007fef4c815fa0 R15: 00007ffe5318ac88 [ 1511.893392][ T5760] [ 1511.896878][ T5760] Kernel Offset: disabled [ 1511.901285][ T5760] Rebooting in 86400 seconds..