last executing test programs: 10m20.363688815s ago: executing program 1 (id=6180): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) 10m20.162672473s ago: executing program 1 (id=6183): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fstat(r0, &(0x7f0000000180)) 10m19.950688212s ago: executing program 1 (id=6186): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)=@multiplanar_fd={0x2, 0xd, 0x4, 0x100, 0x1, {}, {0x2, 0x0, 0x2, 0x8, 0x3, 0x76, "37ab6e60"}, 0x9, 0x4, {0x0}, 0x5d}) 10m19.810371874s ago: executing program 1 (id=6190): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002a00)={[{@dmask={'dmask', 0x3d, 0x8}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x6}}, {@utf8}, {@dmask={'dmask', 0x3d, 0x80}}, {@keep_last_dots}, {@keep_last_dots}, {@sys_tz}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000000340)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 10m19.385490132s ago: executing program 1 (id=6198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x70}}, 0x0) 10m18.936935513s ago: executing program 1 (id=6204): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) 10m18.553760337s ago: executing program 32 (id=6204): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) 2m25.396709613s ago: executing program 3 (id=13298): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x2100, 0x0) getdents(r0, 0x0, 0x58) 2m25.236362797s ago: executing program 3 (id=13300): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) 2m25.120835368s ago: executing program 3 (id=13301): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002a000b05d25a806c8c6f94f90b24fc60", 0x14}], 0x1}, 0x0) 2m24.963438392s ago: executing program 3 (id=13303): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="430300007d010000050202ffff0900"], 0x343) 2m24.792344707s ago: executing program 3 (id=13305): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m23.816335734s ago: executing program 3 (id=13318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe6f4}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d) 2m8.711765513s ago: executing program 33 (id=13318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe6f4}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d) 2.774273152s ago: executing program 5 (id=15271): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r0) 2.384942677s ago: executing program 5 (id=15274): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) brk(0x61e) 2.280409516s ago: executing program 5 (id=15276): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000100003eeffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="0001000020010000300012800b0001006d61637365630000200002800c0004000400000100c28000050003000e"], 0x50}}, 0x0) 2.010094431s ago: executing program 5 (id=15281): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f000000b4c0)=[{{&(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac9824be38c9c2661a897fb45a74a588fdabe427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}], 0x1}}], 0x2, 0x488c4) 1.776524481s ago: executing program 5 (id=15284): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000100)="0bbb268dd6ffa80800001c00000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000e2964909f3048419ed2538ac46ed99069895c210", 0x44) 1.509831865s ago: executing program 5 (id=15288): r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x38, 0x78, 0x39, 0x36, 0x31, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000001600)={{r0}, "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"}) 1.446793891s ago: executing program 4 (id=15289): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000480)={0xa, 0x0, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x3}, 0x20) 1.218390121s ago: executing program 4 (id=15291): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001140)={r0, 0x0, 0x0}, 0x10) 1.079171914s ago: executing program 2 (id=15293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 943.123756ms ago: executing program 4 (id=15294): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3f}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) 887.872881ms ago: executing program 0 (id=15295): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 760.997992ms ago: executing program 2 (id=15296): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) 721.845316ms ago: executing program 0 (id=15297): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) set_tid_address(0x0) 591.428457ms ago: executing program 0 (id=15298): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000b00)="1081", 0x2, r0) 573.473699ms ago: executing program 2 (id=15299): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x1, 0xffffff36}, 0xc) 520.028604ms ago: executing program 4 (id=15300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe77, 0x0, 0x8, 0xfffffffffffffffb, 0xfffffffffffffffd}}, 0x10) 430.362362ms ago: executing program 0 (id=15301): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x5, @raw_data="a8d2912ddb0764dbe14b787f1bbc4a0f05ea54f0be9b1b11fe73974b7b0b018d66c2bd912f75caa796eca1d089e4fba15a53db7612b9f179cb98200b361932ead7bbb865369b33543fa204a3feea1350ff3206613ba0f85e0e9c48a6e1dbd9227c51f477eb21853b40db5a8bbc6b6315be0168318705d54d93645f0e9b6290d14b609894bfb2d32de9dcfc7c4d000e2cb46cb59ecc4c1b09ce625a7f2f68b571ff13717053cf9920c9761b4f8d12ac7ab29d6e40ad7c88651495db7936848b3fcba04076fac2a59c"}) 394.864895ms ago: executing program 2 (id=15302): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 294.586184ms ago: executing program 4 (id=15303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x484, 0x0, 0x8}]}) 224.40336ms ago: executing program 2 (id=15304): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) 165.959635ms ago: executing program 0 (id=15305): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000200)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000007000000002400000000000000290000003200000000000000000000000000ffff", @ANYRESHEX=0x0], 0x40}, 0x6048090) 78.982553ms ago: executing program 4 (id=15306): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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") stat(&(0x7f0000000180)='./file0\x00', 0x0) 76.718033ms ago: executing program 0 (id=15307): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x800000000004) 0s ago: executing program 2 (id=15308): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0xfffffffe, 0x4, 0x0, 0x0, 'syz0\x00', 0x100}, 0x3, 0x0, 0x8, 0x0, 0x2, 0x4, 'syz0\x00', &(0x7f0000004580)=['syz1\x008a\x85\x18\xb6\x82!\xe6\xc2\xd8\xb7g-\xefQ\xa2\xdb\x8e\x02\x9by\xd8\xcf\xd9\xf0\x1e\xc9\xf8\xf8\x10DZ;F\x05\x80\xaf\xddV\xac4\x95.s\b3)\xfc\xd5\xcc-\xe1\xd1\x8d$\xa2\xfb\x8b\xa7\xf6Z=&\xd6$\xbeY2\xa3\xdb\x9cY\xc2\xc7\xac\tf\x96q\x1a\xe9\x01\x10\x0f\x1f\xf5\x88m\xb5wIZ[\xe5Q\x1abd\xc0\xbc\'6\xe4)\xeaj\xae]\x8e\xccS3\xf4\\\x95\xd0 \xe4\x9fs\x11\v\xb1.gw\x7fH\xfd~\xd4\x95A}\xd3m\xb3\x16\x18%!\xc1\x193\xc5q)\x7f\f\xb8qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 1118.640027][T26136] CPU: 0 PID: 26136 Comm: syz-executor Not tainted syzkaller #0 [ 1118.647717][T26136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1118.657812][T26136] Call Trace: [ 1118.661104][T26136] [ 1118.664045][T26136] dump_stack_lvl+0x18c/0x250 [ 1118.668747][T26136] ? show_regs_print_info+0x20/0x20 [ 1118.673964][T26136] ? load_image+0x400/0x400 [ 1118.678495][T26136] ? do_raw_spin_unlock+0x121/0x230 [ 1118.683718][T26136] gfs2_assert_warn_i+0x193/0x2c0 [ 1118.688777][T26136] gfs2_qd_dispose+0x4aa/0x5b0 [ 1118.693570][T26136] gfs2_quota_cleanup+0x410/0x720 [ 1118.698628][T26136] ? spin_lock_bucket+0x150/0x150 [ 1118.703680][T26136] ? __might_sleep+0xe0/0xe0 [ 1118.708296][T26136] ? gfs2_ail_empty_tr+0x2f0/0x2f0 [ 1118.713425][T26136] ? gfs2_quota_sync+0x591/0x5a0 [ 1118.718390][T26136] gfs2_make_fs_ro+0x2aa/0x320 [ 1118.723182][T26136] ? gfs2_dinode_out+0xb10/0xb10 [ 1118.728154][T26136] ? __lock_acquire+0x7d40/0x7d40 [ 1118.733203][T26136] ? __rwlock_init+0x150/0x150 [ 1118.737999][T26136] ? do_raw_spin_unlock+0x121/0x230 [ 1118.743225][T26136] gfs2_put_super+0x224/0x930 [ 1118.747933][T26136] ? gfs2_evict_inode+0x1350/0x1350 [ 1118.753160][T26136] generic_shutdown_super+0x134/0x2b0 [ 1118.758554][T26136] kill_block_super+0x44/0x90 [ 1118.763250][T26136] deactivate_locked_super+0x97/0x100 [ 1118.768640][T26136] cleanup_mnt+0x43b/0x4d0 [ 1118.773079][T26136] task_work_run+0x1d4/0x260 [ 1118.777693][T26136] ? task_work_cancel+0x220/0x220 [ 1118.782740][T26136] ? exit_to_user_mode_loop+0x3b/0x110 [ 1118.788224][T26136] exit_to_user_mode_loop+0xe6/0x110 [ 1118.793536][T26136] exit_to_user_mode_prepare+0xee/0x180 [ 1118.799114][T26136] syscall_exit_to_user_mode+0x1a/0x50 [ 1118.804590][T26136] do_syscall_64+0x61/0xa0 [ 1118.809027][T26136] ? clear_bhb_loop+0x40/0x90 [ 1118.813721][T26136] ? clear_bhb_loop+0x40/0x90 [ 1118.818413][T26136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1118.824320][T26136] RIP: 0033:0x7f3b78b9d897 [ 1118.828754][T26136] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1118.848382][T26136] RSP: 002b:00007ffd90573d88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1118.856819][T26136] RAX: 0000000000000000 RBX: 00007f3b78c31ef0 RCX: 00007f3b78b9d897 [ 1118.864815][T26136] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd90573e40 [ 1118.872804][T26136] RBP: 00007ffd90573e40 R08: 00007ffd90574e40 R09: 00000000ffffffff [ 1118.880794][T26136] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd90574ed0 [ 1118.888782][T26136] R13: 00007f3b78c31ef0 R14: 0000000000111080 R15: 00007ffd90574f10 [ 1118.896788][T26136] [ 1119.105317][T28120] loop0: detected capacity change from 0 to 32768 [ 1119.155612][T28120] (syz.0.13978,28120,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1119.206266][T28120] (syz.0.13978,28120,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1119.291064][T28120] JBD2: Ignoring recovery information on journal [ 1119.367555][T28120] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1119.739774][T14106] ocfs2: Unmounting device (7,0) on (node local) [ 1120.172534][T28186] netlink: 'syz.0.13987': attribute type 11 has an invalid length. [ 1120.386081][T28201] ipt_ECN: cannot use operation on non-tcp rule [ 1120.901845][T28234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14011'. [ 1121.094584][T28244] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1121.481186][T28267] netlink: 'syz.4.14020': attribute type 2 has an invalid length. [ 1122.024238][T28240] loop0: detected capacity change from 0 to 32768 [ 1122.079491][T28240] ERROR: (device loop0): diAllocBit: iag inconsistent [ 1122.079491][T28240] [ 1122.131121][T28240] ialloc: diAlloc returned -5! [ 1122.390526][ T28] kauditd_printk_skb: 168 callbacks suppressed [ 1122.390540][ T28] audit: type=1326 audit(2000000216.848:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28307 comm="syz.0.14033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1122.439852][ T28] audit: type=1326 audit(2000000216.888:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28307 comm="syz.0.14033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1122.571780][ T28] audit: type=1326 audit(2000000216.938:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28307 comm="syz.0.14033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1122.704427][ T28] audit: type=1326 audit(2000000216.938:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28307 comm="syz.0.14033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1122.717842][T28319] loop5: detected capacity change from 0 to 1024 [ 1122.801159][T28326] netlink: 'syz.0.14038': attribute type 30 has an invalid length. [ 1122.804483][ T28] audit: type=1326 audit(2000000216.938:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28307 comm="syz.0.14033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1122.847693][T28329] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1122.976797][ T3427] hfsplus: b-tree write err: -5, ino 4 [ 1123.060829][T28337] netlink: 'syz.0.14043': attribute type 1 has an invalid length. [ 1123.088814][T28337] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.14043'. [ 1123.554509][T28368] Cannot find add_set index 0 as target [ 1123.679296][T28377] netlink: 'syz.0.14054': attribute type 1 has an invalid length. [ 1123.711919][T28377] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.14054'. [ 1123.752183][T28377] netlink: 'syz.0.14054': attribute type 1 has an invalid length. [ 1123.978349][T28398] overlayfs: overlapping lowerdir path [ 1124.332665][T28416] loop5: detected capacity change from 0 to 2048 [ 1124.425322][T28414] batman_adv: batadv0: Interface deactivated: ÿÿÿÿÿÿ [ 1124.432842][T28424] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1124.767419][T28395] 9pnet_fd: p9_fd_create_tcp (28395): problem connecting socket to 127.0.0.1 [ 1124.826722][T28446] IPVS: Error connecting to the multicast addr [ 1124.990816][T28467] loop2: detected capacity change from 0 to 512 [ 1125.046066][T28467] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1125.053124][T28467] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #15: comm syz.2.14072: corrupted inode contents [ 1125.065066][T28472] SET target dimension over the limit! [ 1125.119266][T28467] EXT4-fs (loop2): Remounting filesystem read-only [ 1125.146557][ T2349] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1125.193417][T28467] EXT4-fs (loop2): 1 orphan inode deleted [ 1125.225937][T28467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1125.369113][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.424549][ T2349] usb 6-1: Using ep0 maxpacket: 16 [ 1125.454766][ T2349] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.454794][ T2349] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1125.484665][ T2349] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1125.563584][ T2349] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.594396][ T2349] usb 6-1: Product: syz [ 1125.604714][ T2349] usb 6-1: Manufacturer: syz [ 1125.619725][ T2349] usb 6-1: SerialNumber: syz [ 1126.115644][ T2349] usb 6-1: cannot find UAC_HEADER [ 1126.208938][ T2349] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1126.240341][ T2349] usb 6-1: USB disconnect, device number 5 [ 1126.285598][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1126.681314][T28568] loop2: detected capacity change from 0 to 512 [ 1126.794878][T28568] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.14093: inode has both inline data and extents flags [ 1126.889920][T28568] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.14093: couldn't read orphan inode 15 (err -117) [ 1126.940336][T28568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1127.139428][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.734523][T28633] x_tables: duplicate underflow at hook 4 [ 1127.750400][T28630] netlink: 'syz.0.14109': attribute type 5 has an invalid length. [ 1128.752270][T28696] netlink: 'syz.2.14127': attribute type 1 has an invalid length. [ 1128.781453][T28696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14127'. [ 1129.022161][T28714] bond0: left allmulticast mode [ 1129.033329][T28714] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1129.071855][T28715] netlink: 'syz.2.14131': attribute type 6 has an invalid length. [ 1129.263692][T28726] Non-string source [ 1129.474778][T28736] netlink: 'syz.2.14138': attribute type 75 has an invalid length. [ 1129.799545][T28705] loop4: detected capacity change from 0 to 32768 [ 1129.838004][T28705] (syz.4.14129,28705,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1129.903923][T28705] (syz.4.14129,28705,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1129.994638][T28705] JBD2: Ignoring recovery information on journal [ 1130.109597][T28705] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1130.265083][ T8] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1130.383616][T28784] loop5: detected capacity change from 0 to 2048 [ 1130.400486][T28786] ieee802154 phy0 wpan0: encryption failed: -90 [ 1130.485964][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1130.497325][T28784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1130.536090][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1130.570665][ T8] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1130.606733][T26136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.611080][ T8] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1130.623451][T29341] ocfs2: Unmounting device (7,4) on (node local) [ 1130.691652][ T8] usb 3-1: Product: syz [ 1130.708612][ T8] usb 3-1: Manufacturer: syz [ 1130.713265][ T8] usb 3-1: SerialNumber: syz [ 1130.880283][T28811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14153'. [ 1131.062145][ T8] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 1131.090077][T28819] dlm: no locking on control device [ 1131.098798][ T8] usb 3-1: Handspring Visor / Palm OS: port 82, is for unknown use [ 1131.127193][ T8] usb 3-1: Handspring Visor / Palm OS: port 223, is for HotSync use [ 1131.148867][ T8] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1131.251861][ T8] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 1131.288382][ T8] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1131.331527][ T8] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1131.400763][ T8] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1131.465154][ T8] usb 3-1: USB disconnect, device number 90 [ 1131.505177][ T8] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1131.573706][ T8] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1131.600557][ T8] visor 3-1:1.0: device disconnected [ 1131.631735][T28862] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1132.296429][ T28] audit: type=1326 audit(2000000226.758:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28894 comm="syz.2.14169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c629 code=0x7ffc0000 [ 1132.361300][ T28] audit: type=1326 audit(2000000226.758:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28894 comm="syz.2.14169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c629 code=0x7ffc0000 [ 1132.444654][ T28] audit: type=1326 audit(2000000226.788:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28894 comm="syz.2.14169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f33c3f9c629 code=0x7ffc0000 [ 1132.507643][T28840] loop5: detected capacity change from 0 to 32768 [ 1132.555863][T28840] (syz.5.14159,28840,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1132.574688][ T28] audit: type=1326 audit(2000000226.788:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28894 comm="syz.2.14169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c629 code=0x7ffc0000 [ 1132.602477][T28840] (syz.5.14159,28840,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1132.730086][T28840] JBD2: Ignoring recovery information on journal [ 1132.850368][T28840] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1132.858783][T28918] loop2: detected capacity change from 0 to 2048 [ 1132.895890][T28918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1133.004990][T28918] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.14174: bg 0: block 234: padding at end of block bitmap is not set [ 1133.185713][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.329390][T26136] ocfs2: Unmounting device (7,5) on (node local) [ 1133.637872][T28962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14186'. [ 1133.809919][T28972] loop2: detected capacity change from 0 to 256 [ 1133.913613][T28972] FAT-fs (loop2): Directory bread(block 64) failed [ 1133.924697][T28972] FAT-fs (loop2): Directory bread(block 65) failed [ 1133.964590][T28972] FAT-fs (loop2): Directory bread(block 66) failed [ 1133.971249][T28972] FAT-fs (loop2): Directory bread(block 67) failed [ 1134.011940][T28972] FAT-fs (loop2): Directory bread(block 68) failed [ 1134.029310][T28976] loop0: detected capacity change from 0 to 4096 [ 1134.043349][T28972] FAT-fs (loop2): Directory bread(block 69) failed [ 1134.075794][T28972] FAT-fs (loop2): Directory bread(block 70) failed [ 1134.082381][T28972] FAT-fs (loop2): Directory bread(block 71) failed [ 1134.089280][T28976] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1134.102281][T28972] FAT-fs (loop2): Directory bread(block 72) failed [ 1134.122739][T28972] FAT-fs (loop2): Directory bread(block 73) failed [ 1134.234752][T28976] ntfs3: loop0: failed to convert "c46c" to iso8859-2 [ 1134.244572][ T7641] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1134.456617][ T7641] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1134.469251][ T7641] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.490587][ T7641] usb 6-1: Product: syz [ 1134.506531][ T7641] usb 6-1: Manufacturer: syz [ 1134.514630][ T7641] usb 6-1: SerialNumber: syz [ 1134.535026][ T7641] r8152-cfgselector 6-1: config 0 descriptor?? [ 1134.775264][ T7641] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 1135.000665][ T7641] usb 6-1: USB disconnect, device number 6 [ 1135.148824][T29010] loop2: detected capacity change from 0 to 32768 [ 1135.193074][T29010] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1135.327689][T29010] XFS (loop2): Ending clean mount [ 1135.405355][T29055] xt_TCPMSS: Only works on TCP SYN packets [ 1135.591082][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1135.710534][T29074] netlink: 'syz.4.14213': attribute type 10 has an invalid length. [ 1135.719850][T29074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14213'. [ 1135.728100][ T8] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1135.743854][T29074] batadv0: entered promiscuous mode [ 1135.753957][T29074] batadv0: entered allmulticast mode [ 1135.789674][T29074] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1135.975974][ T8] usb 1-1: config 0 has no interfaces? [ 1136.004926][ T8] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1136.042245][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.065599][ T8] usb 1-1: Product: syz [ 1136.069812][ T8] usb 1-1: Manufacturer: syz [ 1136.104407][ T8] usb 1-1: SerialNumber: syz [ 1136.118084][ T8] r8152-cfgselector 1-1: config 0 descriptor?? [ 1136.168683][T29090] loop2: detected capacity change from 0 to 256 [ 1136.393085][ T8] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1136.632280][T27742] usb 1-1: config 0 descriptor?? [ 1136.648925][ T7641] usb 1-1: USB disconnect, device number 83 [ 1136.807682][T29131] loop4: detected capacity change from 0 to 2048 [ 1136.869933][T29134] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1136.904608][ T5830] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1136.924918][T29131] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 1136.952036][T29131] Remounting filesystem read-only [ 1137.081872][T29114] loop2: detected capacity change from 0 to 32768 [ 1137.096818][T29114] XFS: ikeep mount option is deprecated. [ 1137.114571][ T5830] usb 6-1: Using ep0 maxpacket: 8 [ 1137.124863][ T5830] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1137.143805][ T788] XFS (loop2): filesystem is marked as having an internal log; do not specify logdev on the mount command line. [ 1137.171878][ T5830] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1137.184434][ T5830] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1137.192688][ T5830] usb 6-1: Product: syz [ 1137.197009][ T5830] usb 6-1: Manufacturer: syz [ 1137.201637][ T5830] usb 6-1: SerialNumber: syz [ 1137.428508][ T5830] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1137.459624][ T5830] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1137.484473][ T5830] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1137.646986][ T5830] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 1137.664417][ T5830] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1137.685819][ T5830] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1137.715242][ T5830] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1137.741949][ T5830] usb 6-1: USB disconnect, device number 7 [ 1137.773099][ T5830] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1137.827796][ T5830] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1137.848938][ T5830] visor 6-1:1.0: device disconnected [ 1138.116383][T29198] loop2: detected capacity change from 0 to 128 [ 1138.566030][T29221] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1138.860984][T29242] overlay: Unknown parameter 'subj_role' [ 1138.961094][T29250] netlink: 'syz.5.14249': attribute type 12 has an invalid length. [ 1139.145336][T29265] netlink: 'syz.0.14254': attribute type 8 has an invalid length. [ 1139.214560][ T5801] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1139.435527][ T5801] usb 5-1: Using ep0 maxpacket: 8 [ 1139.472432][ T5801] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1139.505744][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.524265][ T5801] usb 5-1: Product: syz [ 1139.529328][ T5801] usb 5-1: Manufacturer: syz [ 1139.549452][ T5801] usb 5-1: SerialNumber: syz [ 1139.571680][ T5801] usb 5-1: config 0 descriptor?? [ 1139.597292][ T5801] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1139.621127][T29293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14264'. [ 1140.044716][ T5801] gspca_sq930x: ucbus_write failed -71 [ 1140.286862][ T5801] gspca_sq930x: Sensor ov9630 not yet treated [ 1140.294265][ T5801] sq930x: probe of 5-1:0.0 failed with error -22 [ 1140.317600][ T5801] usb 5-1: USB disconnect, device number 41 [ 1140.493160][T29356] loop2: detected capacity change from 0 to 256 [ 1140.518436][T29356] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 1140.572438][T29356] tmpfs: Bad value for 'mpol' [ 1141.067982][T29389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14292'. [ 1141.229361][T29398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14295'. [ 1141.238844][T29398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14295'. [ 1141.674664][ T8] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1141.889914][ T8] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1141.917435][ T8] usb 3-1: config 0 has no interface number 0 [ 1141.923586][ T8] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1141.967652][ T8] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1142.007249][ T8] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1142.016586][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.034785][ T8] usb 3-1: Product: syz [ 1142.035777][T29449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14312'. [ 1142.040908][ T8] usb 3-1: Manufacturer: syz [ 1142.074690][ T8] usb 3-1: SerialNumber: syz [ 1142.099147][ T8] usb 3-1: config 0 descriptor?? [ 1142.111445][T29408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1142.147925][ T8] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1142.172007][ T8] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1142.375102][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1142.575873][ T5831] usb 3-1: USB disconnect, device number 91 [ 1142.593181][ T5831] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1142.648997][ T5831] cyberjack 3-1:0.69: device disconnected [ 1142.685504][T29481] bridge9: entered allmulticast mode [ 1142.859227][T29453] loop5: detected capacity change from 0 to 32768 [ 1142.929775][T29453] ERROR: (device loop5): dtSearch: DT_GETPAGE: dtree page corrupt [ 1142.929775][T29453] [ 1142.970210][T29453] ERROR: (device loop5): remounting filesystem as read-only [ 1142.992635][T29453] jfs_lookup: dtSearch returned -5 [ 1143.504510][ T5801] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1143.601855][T29540] netlink: 'syz.2.14332': attribute type 1 has an invalid length. [ 1143.622720][T29540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14332'. [ 1143.695275][ T5801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1143.714424][ T5801] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1143.739321][ T5801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1143.779992][ T5801] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1143.819887][ T5801] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1143.835548][ T5801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.850592][ T5801] usb 6-1: Product: syz [ 1143.864648][ T5801] usb 6-1: Manufacturer: syz [ 1143.869271][ T5801] usb 6-1: SerialNumber: syz [ 1143.889387][T29555] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 1143.892860][ T5801] usb 6-1: config 0 descriptor?? [ 1143.940710][ T5801] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 1144.226563][T29579] loop0: detected capacity change from 0 to 8 [ 1144.249489][ T5801] ums-isd200: probe of 6-1:0.0 failed with error -22 [ 1144.523780][ T7641] usb 6-1: USB disconnect, device number 8 [ 1145.020758][T29631] netlink: 'syz.2.14358': attribute type 9 has an invalid length. [ 1145.058685][ T28] audit: type=1326 audit(2000000239.518:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29635 comm="syz.0.14359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1145.062533][T29631] netlink: 911 bytes leftover after parsing attributes in process `syz.2.14358'. [ 1145.121771][ T28] audit: type=1326 audit(2000000239.548:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29635 comm="syz.0.14359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1145.221139][ T28] audit: type=1326 audit(2000000239.548:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29635 comm="syz.0.14359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1145.244707][ T28] audit: type=1326 audit(2000000239.548:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29635 comm="syz.0.14359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1145.287453][T29645] loop0: detected capacity change from 0 to 256 [ 1145.457505][T29645] FAT-fs (loop0): Directory bread(block 64) failed [ 1145.464084][T29645] FAT-fs (loop0): Directory bread(block 65) failed [ 1145.494244][T29645] FAT-fs (loop0): Directory bread(block 66) failed [ 1145.501564][T29645] FAT-fs (loop0): Directory bread(block 67) failed [ 1145.516887][T29645] FAT-fs (loop0): Directory bread(block 68) failed [ 1145.523634][T29645] FAT-fs (loop0): Directory bread(block 69) failed [ 1145.543925][T29645] FAT-fs (loop0): Directory bread(block 70) failed [ 1145.562271][T29645] FAT-fs (loop0): Directory bread(block 71) failed [ 1145.577917][T29645] FAT-fs (loop0): Directory bread(block 72) failed [ 1145.601788][T29645] FAT-fs (loop0): Directory bread(block 73) failed [ 1145.704976][T29666] CIFS: VFS: Malformed UNC in devname [ 1146.688971][T29717] loop2: detected capacity change from 0 to 1024 [ 1146.782791][T29717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1146.883464][T29717] EXT4-fs error (device loop2): __ext4_new_inode:1075: comm syz.2.14385: reserved inode found cleared - inode=18 [ 1147.059142][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.108719][T29709] loop4: detected capacity change from 0 to 32768 [ 1147.232387][T29709] JBD2: Ignoring recovery information on journal [ 1147.396237][T29709] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1147.763891][T29341] ocfs2: Unmounting device (7,4) on (node local) [ 1148.147568][T29794] loop4: detected capacity change from 0 to 64 [ 1148.186713][T29794] hfs: filesystem is marked locked, mounting read-only. [ 1148.225975][T29794] hfs: filesystem is marked locked, leaving read-only. [ 1148.503875][T29817] netlink: 'syz.5.14413': attribute type 21 has an invalid length. [ 1148.541678][T29817] netlink: 'syz.5.14413': attribute type 1 has an invalid length. [ 1148.565262][T29817] netlink: 144 bytes leftover after parsing attributes in process `syz.5.14413'. [ 1148.671388][T29831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14417'. [ 1148.694580][T29831] netlink: 'syz.4.14417': attribute type 1 has an invalid length. [ 1148.713429][T29831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14417'. [ 1148.735166][ T5801] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 1148.933313][T29841] bridge4: entered allmulticast mode [ 1148.949061][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1148.960817][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1148.994598][ T5801] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1149.011828][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.044683][ T5801] usb 1-1: Product: syz [ 1149.048898][ T5801] usb 1-1: Manufacturer: syz [ 1149.053504][ T5801] usb 1-1: SerialNumber: syz [ 1149.096910][ T5801] usb 1-1: config 0 descriptor?? [ 1149.125421][ T5801] hub 1-1:0.0: bad descriptor, ignoring hub [ 1149.131371][ T5801] hub: probe of 1-1:0.0 failed with error -5 [ 1149.161883][T29853] loop5: detected capacity change from 0 to 256 [ 1149.169973][ T5801] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input61 [ 1149.200074][T29857] loop4: detected capacity change from 0 to 16 [ 1149.218014][T29853] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 1149.243902][T29853] FAT-fs (loop5): Filesystem has been set read-only [ 1149.253014][T29857] erofs: (device loop4): mounted with root inode @ nid 36. [ 1149.303473][T29857] erofs: (device loop4): z_erofs_read_folio: read error -22 @ 43 of nid 36 [ 1149.312719][T29827] loop2: detected capacity change from 0 to 32768 [ 1149.375772][T29827] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.14415 (29827) [ 1149.384410][T26136] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 1149.465493][ T788] usb 1-1: USB disconnect, device number 84 [ 1149.528089][T29827] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1149.580563][T29827] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1149.610152][T29827] BTRFS info (device loop2): using free space tree [ 1149.756224][T29903] netlink: 'syz.5.14427': attribute type 21 has an invalid length. [ 1149.764213][T29903] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14427'. [ 1149.779455][T29827] BTRFS info (device loop2): enabling ssd optimizations [ 1149.795844][T29827] BTRFS info (device loop2): auto enabling async discard [ 1149.958439][T29911] netlink: 'syz.5.14429': attribute type 10 has an invalid length. [ 1150.006743][T29911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.014547][T29911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.076884][ T5772] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1150.134114][T29911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.143703][T29911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.152462][T29911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.159698][T29911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.316498][T29911] team0: Port device bridge0 added [ 1150.357395][T29920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14431'. [ 1150.713073][T29942] netlink: 'syz.4.14437': attribute type 2 has an invalid length. [ 1150.754614][T29942] netlink: 723 bytes leftover after parsing attributes in process `syz.4.14437'. [ 1151.173274][T29964] netlink: 'syz.2.14446': attribute type 32 has an invalid length. [ 1151.309755][T29971] loop5: detected capacity change from 0 to 2048 [ 1151.378594][T29980] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1151.431158][T29983] loop4: detected capacity change from 0 to 1024 [ 1151.498887][T29971] NILFS (loop5): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1151.523107][T29983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1151.554841][T29971] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1151.592749][T29992] kernel read not supported for file / œÏüÔ¢W)ëS“§Ç-ë (pid: 29992 comm: syz.0.14454) [ 1151.606363][T29971] Remounting filesystem read-only [ 1151.620712][T29983] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 39: comm syz.4.14451: bad entry in directory: rec_len is smaller than minimal - offset=7296, inode=0, rec_len=0, size=1024 fake=0 [ 1151.623172][T29971] NILFS (loop5): error -5 truncating bmap (ino=16) [ 1151.653934][ T28] audit: type=1800 audit(2000000246.108:769): pid=29992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.14454" name=20019CCFFCD4A25729EB5393A7C72DEB dev="mqueue" ino=107694 res=0 errno=0 [ 1151.696541][T29983] EXT4-fs (loop4): Remounting filesystem read-only [ 1151.772536][T29341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.894987][T26136] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 1151.901985][T26136] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 1151.971491][T26136] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1151.989068][T26136] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.005051][T26136] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.044668][T26136] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 1152.053597][T26136] NILFS (loop5): discard dirty page: offset=0, ino=16 [ 1152.097506][T26136] NILFS (loop5): discard dirty block: blocknr=23, size=1024 [ 1152.121864][T26136] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.139174][T30015] affs: No valid root block on device nbd2 [ 1152.147999][T26136] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.167589][T26136] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.178840][T26136] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 1152.204328][T26136] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.220945][T26136] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.251579][T26136] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 1152.294389][T26136] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1152.842044][T30059] xt_TCPMSS: Only works on TCP SYN packets [ 1152.980710][T30067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14476'. [ 1153.058600][T30070] batadv_slave_0: entered promiscuous mode [ 1153.083359][T30070] batadv_slave_0: entered allmulticast mode [ 1153.133249][T30070] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1153.510686][T30098] ieee802154 phy0 wpan0: encryption failed: -22 [ 1153.517337][T30102] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14487'. [ 1153.539753][T30106] netlink: 'syz.0.14488': attribute type 3 has an invalid length. [ 1153.556057][T30106] netlink: 'syz.0.14488': attribute type 27 has an invalid length. [ 1153.754386][ T5801] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1153.788167][T30121] netlink: 'syz.5.14493': attribute type 1 has an invalid length. [ 1153.966729][ T5801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1153.980093][T30131] netlink: 'syz.4.14497': attribute type 10 has an invalid length. [ 1153.984881][ T5801] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1154.014609][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.061295][ T5801] usb 3-1: config 0 descriptor?? [ 1154.078235][ T5801] smsusb:smsusb_probe: board id=8, interface number 0 [ 1154.104979][ T5801] smsusb:smsusb_probe: Device initialized with return code -19 [ 1154.167643][T30139] [U]  [ 1154.171285][T30139] [U] K{‘ [ 1154.183153][T30139] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 1154.203254][T30139] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 1154.230897][T30139] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 1154.243709][T30139] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 1154.284009][T30139] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 1154.313047][T30139] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 1154.334421][T30139] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 1154.376895][ T5801] usb 3-1: USB disconnect, device number 92 [ 1154.383328][T30139] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 1154.518879][T30139] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 1154.534025][T30139] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 1154.556476][T30139] [U] 22½“Æ©Ðû©x?0;3u± [ 1154.561414][T30139] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 1154.572102][T30164] xt_bpf: check failed: parse error [ 1154.587418][T30139] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 1154.634725][T30139] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 1154.643547][T30139] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 1154.653139][T30139] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 1154.667565][T30139] [U] ¹ ec [ 1154.670709][T30139] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 1154.744147][T30137] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 1154.904793][ T7641] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1155.084667][ T7641] usb 6-1: Using ep0 maxpacket: 32 [ 1155.096572][ T7641] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.129077][ T7641] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 1155.154441][ T7641] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.193023][ T7641] usb 6-1: Product: syz [ 1155.203143][ T7641] usb 6-1: Manufacturer: syz [ 1155.215531][ T7641] usb 6-1: SerialNumber: syz [ 1155.233705][ T7641] usb 6-1: config 0 descriptor?? [ 1155.432924][T30198] loop2: detected capacity change from 0 to 64 [ 1155.440031][T30173] loop4: detected capacity change from 0 to 32768 [ 1155.462470][ T7641] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1155.491509][T30173] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1155.665660][ T7641] usb 6-1: USB disconnect, device number 9 [ 1155.819194][T30173] XFS (loop4): Ending clean mount [ 1155.845038][T30230] netlink: 7 bytes leftover after parsing attributes in process `syz.2.14517'. [ 1155.884721][T30230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14517'. [ 1155.885124][T30233] netlink: 'syz.0.14518': attribute type 1 has an invalid length. [ 1155.946940][T30173] syz.4.14506: attempt to access beyond end of device [ 1155.946940][T30173] loop4: rw=4096, sector=3546894483, nr_sectors = 1 limit=32768 [ 1156.059582][T29341] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1156.171024][T30245] netlink: 'syz.0.14522': attribute type 1 has an invalid length. [ 1156.179915][T30245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14522'. [ 1156.334687][ T7641] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1156.534396][ T7641] usb 3-1: Using ep0 maxpacket: 32 [ 1156.541787][ T7641] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.572591][ T7641] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.613163][ T7641] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1156.647016][ T7641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.685558][ T7641] usb 3-1: config 0 descriptor?? [ 1156.717279][ T7641] hub 3-1:0.0: USB hub found [ 1156.945164][ T7641] hub 3-1:0.0: 1 port detected [ 1157.030093][T30287] loop5: detected capacity change from 0 to 2048 [ 1157.048057][T30287] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1157.076845][T30295] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1157.088173][T30287] syz.5.14533: attempt to access beyond end of device [ 1157.088173][T30287] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1157.135914][T30287] syz.5.14533: attempt to access beyond end of device [ 1157.135914][T30287] loop5: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 1157.163374][T30287] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=3) [ 1157.164440][ T7641] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1157.203450][ T7641] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1157.233304][ T7641] usbhid 3-1:0.0: can't add hid device: -71 [ 1157.244668][ T7641] usbhid: probe of 3-1:0.0 failed with error -71 [ 1157.325985][ T7641] usb 3-1: USB disconnect, device number 93 [ 1157.399375][T30297] loop4: detected capacity change from 0 to 8192 [ 1157.441806][T30297] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1157.465020][T30297] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1157.503743][T30297] REISERFS (device loop4): using ordered data mode [ 1157.517352][ T28] audit: type=1326 audit(2000000251.968:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30317 comm="syz.0.14538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1157.559805][T30297] reiserfs: using flush barriers [ 1157.607008][ T28] audit: type=1326 audit(2000000251.968:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30317 comm="syz.0.14538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1157.634637][T30297] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1157.671744][ T28] audit: type=1326 audit(2000000252.008:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30317 comm="syz.0.14538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1157.705429][T30297] REISERFS (device loop4): checking transaction log (loop4) [ 1157.724556][ T28] audit: type=1326 audit(2000000252.008:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30317 comm="syz.0.14538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1157.747874][T30297] REISERFS (device loop4): Using r5 hash to sort names [ 1157.784733][T30297] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1157.815608][T30297] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1157.844410][ T28] audit: type=1326 audit(2000000252.008:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30317 comm="syz.0.14538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1158.310939][T30320] loop5: detected capacity change from 0 to 32768 [ 1158.360828][T30351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14544'. [ 1158.425556][T30320] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1158.525120][T30364] netlink: 'syz.2.14549': attribute type 13 has an invalid length. [ 1158.545260][T30364] gretap0: refused to change device tx_queue_len [ 1158.558884][T30367] loop0: detected capacity change from 0 to 164 [ 1158.559711][T30320] XFS (loop5): Ending clean mount [ 1158.581280][T30364] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1158.892708][T30378] netlink: 'syz.0.14552': attribute type 10 has an invalid length. [ 1158.916192][T30378] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.14552'. [ 1158.948308][T26136] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1159.142580][T30392] loop2: detected capacity change from 0 to 16 [ 1159.185602][T30392] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 1159.193485][T30392] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 1159.673291][T30392] erofs: DAX unsupported by block device. Turning off DAX. [ 1159.703313][T30392] erofs: (device loop2): mounted with root inode @ nid 36. [ 1159.849624][ T5085] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4045 in[4096, 0] out[9000] [ 1159.872098][T30392] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4045 in[4096, 0] out[8192] [ 1159.896913][ T28] audit: type=1800 audit(2000000254.358:775): pid=30392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14556" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1159.966189][T30436] loop4: detected capacity change from 0 to 64 [ 1159.984427][ T788] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1160.186672][ T788] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1160.223615][ T788] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.244804][ T788] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1160.253797][ T788] usb 6-1: config 1 has no interface number 1 [ 1160.304713][ T788] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1160.331602][ T788] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1160.344208][ T788] usb 6-1: New USB device strings: Mfr=20, Product=2, SerialNumber=3 [ 1160.363133][ T788] usb 6-1: Product: syz [ 1160.368467][ T788] usb 6-1: Manufacturer: syz [ 1160.373091][ T788] usb 6-1: SerialNumber: syz [ 1160.686729][ T788] usb 6-1: USB disconnect, device number 10 [ 1160.738888][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1160.955946][T30440] loop0: detected capacity change from 0 to 40427 [ 1161.009302][T30440] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1161.028828][T30440] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1161.077335][T30440] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1161.085509][T30497] loop2: detected capacity change from 0 to 512 [ 1161.291251][T30440] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1161.314908][T30440] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1161.771609][T30493] loop4: detected capacity change from 0 to 32768 [ 1162.021097][T30535] QAT: failed to copy from user cfg_data. [ 1162.140730][T30541] netlink: 256 bytes leftover after parsing attributes in process `syz.5.14591'. [ 1162.312942][T30551] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1162.427418][T30556] loop5: detected capacity change from 0 to 64 [ 1162.726915][T30576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14600'. [ 1162.844080][T30581] loop4: detected capacity change from 0 to 256 [ 1162.880135][T30581] FAT-fs (loop4): Directory bread(block 64) failed [ 1162.900385][T30581] FAT-fs (loop4): Directory bread(block 65) failed [ 1162.942963][T30581] FAT-fs (loop4): Directory bread(block 66) failed [ 1162.953007][T30581] FAT-fs (loop4): Directory bread(block 67) failed [ 1162.973093][T30581] FAT-fs (loop4): Directory bread(block 68) failed [ 1163.013250][T30581] FAT-fs (loop4): Directory bread(block 69) failed [ 1163.023464][T30581] FAT-fs (loop4): Directory bread(block 70) failed [ 1163.038784][T30581] FAT-fs (loop4): Directory bread(block 71) failed [ 1163.063070][T30581] FAT-fs (loop4): Directory bread(block 72) failed [ 1163.085382][T30581] FAT-fs (loop4): Directory bread(block 73) failed [ 1163.150949][T30599] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 1163.505914][T30619] netlink: 'syz.2.14612': attribute type 39 has an invalid length. [ 1163.577132][T30608] loop5: detected capacity change from 0 to 8192 [ 1163.624508][T30608] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1163.659634][T30608] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 1163.668520][T30629] loop0: detected capacity change from 0 to 256 [ 1163.669924][T30608] REISERFS (device loop5): using ordered data mode [ 1163.681837][T30608] reiserfs: using flush barriers [ 1163.699671][T30608] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1163.725797][T30608] REISERFS (device loop5): checking transaction log (loop5) [ 1163.764665][T30608] REISERFS (device loop5): Using r5 hash to sort names [ 1163.771950][T30608] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1163.807868][T30629] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 1163.843477][T30608] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1164.160897][T30651] loop2: detected capacity change from 0 to 2048 [ 1164.225069][T30651] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1164.320718][T30664] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1164.374542][ T788] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1164.605923][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 1164.616576][ T788] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.629899][ T788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1164.649246][ T788] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1164.661208][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.670006][ T788] usb 1-1: Product: syz [ 1164.674875][ T788] usb 1-1: Manufacturer: syz [ 1164.679490][ T788] usb 1-1: SerialNumber: syz [ 1164.969494][ T788] usb 1-1: 0:2 : does not exist [ 1164.979099][ T788] usb 1-1: unit 9 not found! [ 1165.015597][ T788] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 1165.068190][ T788] usb 1-1: USB disconnect, device number 85 [ 1165.187994][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1165.222327][T30719] loop5: detected capacity change from 0 to 2048 [ 1165.274415][T30719] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1165.410268][T30735] xt_ecn: cannot match TCP bits for non-tcp packets [ 1165.577408][T30743] loop4: detected capacity change from 0 to 64 [ 1166.034388][ T788] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1166.243489][ T788] usb 1-1: config 1 has an invalid interface number: 28 but max is 0 [ 1166.284430][ T788] usb 1-1: config 1 has no interface number 0 [ 1166.290586][ T788] usb 1-1: config 1 interface 28 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1166.339849][ T788] usb 1-1: config 1 interface 28 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 1166.369852][ T788] usb 1-1: config 1 interface 28 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 1166.412379][ T788] usb 1-1: config 1 interface 28 has no altsetting 0 [ 1166.445588][ T788] usb 1-1: New USB device found, idVendor=045e, idProduct=0473, bcdDevice=e4.34 [ 1166.474434][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.505336][ T788] usb 1-1: Product: syz [ 1166.509538][ T788] usb 1-1: Manufacturer: syz [ 1166.514141][ T788] usb 1-1: SerialNumber: syz [ 1166.559283][T30757] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1166.591665][ T788] ipaq 1-1:1.28: PocketPC PDA converter detected [ 1166.621842][ T28] audit: type=1326 audit(2000000261.078:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30807 comm="syz.5.14660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78b9c629 code=0x7ffc0000 [ 1166.644285][ C1] vkms_vblank_simulate: vblank timer overrun [ 1166.674483][ T28] audit: type=1326 audit(2000000261.078:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30807 comm="syz.5.14660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78b9c629 code=0x7ffc0000 [ 1166.696919][ C1] vkms_vblank_simulate: vblank timer overrun [ 1166.735193][T30814] netlink: 68 bytes leftover after parsing attributes in process `syz.4.14661'. [ 1166.743889][ T28] audit: type=1326 audit(2000000261.118:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30807 comm="syz.5.14660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f3b78b9c629 code=0x7ffc0000 [ 1166.832180][ T788] usb 1-1: PocketPC PDA converter now attached to ttyUSB0 [ 1166.851409][ T28] audit: type=1326 audit(2000000261.178:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30807 comm="syz.5.14660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78b9c629 code=0x7ffc0000 [ 1166.909937][ T28] audit: type=1326 audit(2000000261.178:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30807 comm="syz.5.14660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78b9c629 code=0x7ffc0000 [ 1166.970942][T30830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14665'. [ 1167.025718][ T5801] usb 1-1: USB disconnect, device number 86 [ 1167.057487][ T5801] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 1167.080802][ T5801] ipaq 1-1:1.28: device disconnected [ 1167.525231][T30872] netlink: 'syz.2.14674': attribute type 21 has an invalid length. [ 1167.533211][T30872] IPv6: NLM_F_CREATE should be specified when creating new route [ 1167.564747][T30872] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1167.571993][T30872] IPv6: NLM_F_CREATE should be set when creating new route [ 1167.579326][T30872] IPv6: NLM_F_CREATE should be set when creating new route [ 1167.586598][T30872] IPv6: NLM_F_CREATE should be set when creating new route [ 1168.365298][T30922] netlink: 'syz.5.14691': attribute type 1 has an invalid length. [ 1168.464662][ T7641] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1168.678876][ T7641] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1168.696200][ T7641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.708052][T30898] loop2: detected capacity change from 0 to 32768 [ 1168.716571][ T7641] usb 5-1: Product: syz [ 1168.720766][ T7641] usb 5-1: Manufacturer: syz [ 1168.734239][ T7641] usb 5-1: SerialNumber: syz [ 1168.741782][ T7641] usb 5-1: config 0 descriptor?? [ 1168.784468][T30898] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1168.953850][T30898] XFS (loop2): Ending clean mount [ 1168.960123][ T7641] hso 5-1:0.0: Failed to find BULK IN ep [ 1168.992321][ T7641] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1168.992730][T30898] XFS (loop2): Quotacheck needed: Please wait. [ 1169.136420][ T28] audit: type=1326 audit(2000000263.598:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30969 comm="syz.0.14700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1169.154756][T30898] XFS (loop2): Quotacheck: Done. [ 1169.181421][ T7641] usb 5-1: USB disconnect, device number 42 [ 1169.196511][ T28] audit: type=1326 audit(2000000263.628:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30969 comm="syz.0.14700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1169.220010][ T28] audit: type=1326 audit(2000000263.628:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30969 comm="syz.0.14700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1169.297230][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1169.308389][ T28] audit: type=1326 audit(2000000263.628:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30969 comm="syz.0.14700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1169.330809][ C1] vkms_vblank_simulate: vblank timer overrun [ 1169.405673][ T28] audit: type=1326 audit(2000000263.688:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30969 comm="syz.0.14700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1169.428100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1169.635134][T30997] loop0: detected capacity change from 0 to 256 [ 1169.639912][T30994] loop5: detected capacity change from 0 to 4096 [ 1169.968051][T31011] sctp: [Deprecated]: syz.4.14710 (pid 31011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1169.968051][T31011] Use struct sctp_sack_info instead [ 1170.165723][T31021] netlink: 'syz.4.14714': attribute type 21 has an invalid length. [ 1170.204443][T31021] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14714'. [ 1170.446071][T31039] loop5: detected capacity change from 0 to 64 [ 1170.640101][T31047] loop4: detected capacity change from 0 to 512 [ 1170.714963][T31047] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.14721: invalid block [ 1170.825693][T31047] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 1170.948142][T31047] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.14721: attempt to clear invalid blocks 983261 len 1 [ 1170.971896][T31047] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.14721: invalid indirect mapped block 2683928664 (level 0) [ 1171.045694][T31047] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.14721: Invalid inode table block 0 in block_group 0 [ 1171.089142][T31047] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1171.099388][T31047] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1171.108491][ T5831] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1171.154665][T31047] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.14721: Invalid inode table block 0 in block_group 0 [ 1171.182974][T31047] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1171.223390][T31047] EXT4-fs error (device loop4): ext4_truncate:4294: inode #13: comm syz.4.14721: mark_inode_dirty error [ 1171.244036][T31080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14730'. [ 1171.251595][T31047] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 1171.264597][T31047] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.14721: Invalid inode table block 0 in block_group 0 [ 1171.278787][T31047] EXT4-fs (loop4): 1 truncate cleaned up [ 1171.288526][T31047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1171.320718][ T5831] usb 6-1: Using ep0 maxpacket: 16 [ 1171.345609][ T5831] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.374776][T31047] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.14721: Invalid inode table block 0 in block_group 0 [ 1171.379692][ T5831] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1171.411706][T31047] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1171.445036][ T5831] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1171.454120][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.502553][ T5831] usb 6-1: Product: syz [ 1171.514371][ T5831] usb 6-1: Manufacturer: syz [ 1171.519005][ T5831] usb 6-1: SerialNumber: syz [ 1171.559519][T29341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.742025][ T5831] usb 6-1: 0:2 : does not exist [ 1171.755740][ T5831] usb 6-1: unit 3 not found! [ 1171.885799][ T5831] usb 6-1: USB disconnect, device number 11 [ 1171.990610][T31123] loop4: detected capacity change from 0 to 2048 [ 1172.058483][T31135] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1172.077087][T31137] loop2: detected capacity change from 0 to 512 [ 1172.093806][T31123] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 1172.139006][T31137] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1172.149285][T31123] Remounting filesystem read-only [ 1172.366578][ T5772] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1172.569803][T31160] pimreg: entered allmulticast mode [ 1172.631591][T31155] loop4: detected capacity change from 0 to 4096 [ 1172.657702][T31155] __ntfs_warning: 4 callbacks suppressed [ 1172.657716][T31155] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1172.791202][T31155] ntfs: volume version 3.1. [ 1172.871174][T31181] overlay: Unknown parameter '\' [ 1173.127319][T31190] ip6t_srh: unknown srh invflags 4449 [ 1173.196523][T31193] loop2: detected capacity change from 0 to 64 [ 1173.243427][T31193] hfs: unable to locate alternate MDB [ 1173.266582][T31193] hfs: continuing without an alternate MDB [ 1173.370871][T31204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14759'. [ 1173.853865][T31234] netlink: 'syz.4.14768': attribute type 10 has an invalid length. [ 1173.950287][T31240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1174.010206][T31242] tc_dump_action: action bad kind [ 1174.382262][T31270] delete_channel: no stack [ 1174.527089][T31277] loop0: detected capacity change from 0 to 16 [ 1174.545228][T31277] erofs: (device loop0): mounted with root inode @ nid 36. [ 1174.600708][T31277] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 1174.650169][T31277] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1174.700299][T31277] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 1174.750752][T31277] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 1174.776068][T31292] netlink: 3 bytes leftover after parsing attributes in process `syz.5.14786'. [ 1174.779718][T31277] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 1174.806475][T31277] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 1174.827203][T31277] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 1174.849991][T31277] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 1174.885468][T31277] erofs: (device loop0): z_erofs_read_folio: read error -95 @ 0 of nid 89 [ 1174.945106][ T28] audit: type=1800 audit(2000000005.699:790): pid=31277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.14782" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1175.166101][T31318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14793'. [ 1175.328709][T31324] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14797'. [ 1175.523980][T31335] netlink: 'syz.5.14800': attribute type 1 has an invalid length. [ 1175.671114][T31343] netlink: 'syz.4.14802': attribute type 5 has an invalid length. [ 1175.733090][T31343] : entered promiscuous mode [ 1175.760080][T31346] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14804'. [ 1176.292915][T31385] netlink: 300 bytes leftover after parsing attributes in process `syz.2.14816'. [ 1176.899559][T31423] loop2: detected capacity change from 0 to 16 [ 1176.917174][T31423] erofs: (device loop2): mounted with root inode @ nid 36. [ 1176.966896][T31423] syz.2.14828: attempt to access beyond end of device [ 1176.966896][T31423] loop2: rw=0, sector=34359736320, nr_sectors = 8 limit=16 [ 1177.160957][T31446] netlink: 92 bytes leftover after parsing attributes in process `syz.5.14833'. [ 1177.177962][T31446] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14833'. [ 1177.204694][ T7641] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1177.284502][ T788] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1177.332164][T31450] loop2: detected capacity change from 0 to 8192 [ 1177.348995][T31450] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1177.363175][T31450] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1177.373763][T31450] REISERFS (device loop2): using journaled data mode [ 1177.381565][T31450] reiserfs: using flush barriers [ 1177.414466][T31450] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1177.436242][ T7641] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1177.443790][T31450] REISERFS (device loop2): checking transaction log (loop2) [ 1177.461460][T31450] REISERFS (device loop2): Using r5 hash to sort names [ 1177.470458][T31450] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1177.471657][ T7641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.485191][T31450] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1177.503650][ T788] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1177.513118][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.532617][ T7641] usb 5-1: config 0 descriptor?? [ 1177.544844][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.551200][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.560248][ T788] usb 1-1: config 0 descriptor?? [ 1177.576326][ T7641] cp210x 5-1:0.0: cp210x converter detected [ 1177.829098][ T7641] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1177.885954][ T28] audit: type=1326 audit(2000000008.649:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31472 comm="syz.5.14839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78b9c629 code=0x7ffc0000 [ 1177.949813][ T28] audit: type=1326 audit(2000000008.649:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31472 comm="syz.5.14839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78b9c629 code=0x7ffc0000 [ 1178.016533][ T28] audit: type=1326 audit(2000000008.689:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31472 comm="syz.5.14839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f3b78b9c629 code=0x7ffc0000 [ 1178.046892][ T788] [drm:udl_init] *ERROR* Selecting channel failed [ 1178.063590][ T28] audit: type=1326 audit(2000000008.689:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31472 comm="syz.5.14839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78b9c629 code=0x7ffc0000 [ 1178.086059][ C1] vkms_vblank_simulate: vblank timer overrun [ 1178.089574][ T788] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 1178.131533][ T5831] usb 5-1: USB disconnect, device number 43 [ 1178.159448][ T5831] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1178.170638][ T788] [drm] Initialized udl on minor 2 [ 1178.189095][ T5831] cp210x 5-1:0.0: device disconnected [ 1178.204054][ T788] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1178.243506][ T788] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1178.268340][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1178.288665][ T788] usb 1-1: USB disconnect, device number 87 [ 1178.303811][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1178.485554][T31522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14845'. [ 1178.494985][T31522] netlink: 'syz.2.14845': attribute type 2 has an invalid length. [ 1178.502816][T31522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14845'. [ 1178.804579][T31537] netlink: 'syz.4.14850': attribute type 7 has an invalid length. [ 1178.825124][T31531] loop2: detected capacity change from 0 to 4096 [ 1178.867603][T31531] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1178.971705][T31531] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1179.038117][T31531] ntfs3: loop2: Failed to load $Extend (-22). [ 1179.044242][T31531] ntfs3: loop2: Failed to initialize $Extend. [ 1179.097548][ T28] audit: type=1326 audit(2000000009.869:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31554 comm="syz.0.14855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1179.119978][ C1] vkms_vblank_simulate: vblank timer overrun [ 1179.155987][ T28] audit: type=1326 audit(2000000009.869:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31554 comm="syz.0.14855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1179.179387][ T28] audit: type=1326 audit(2000000009.869:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31554 comm="syz.0.14855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1179.201711][ C1] vkms_vblank_simulate: vblank timer overrun [ 1179.214729][ T5830] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1179.240758][ T28] audit: type=1326 audit(2000000009.869:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31554 comm="syz.0.14855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1179.266032][ T28] audit: type=1326 audit(2000000009.869:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31554 comm="syz.0.14855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82539c629 code=0x7ffc0000 [ 1179.288456][ C1] vkms_vblank_simulate: vblank timer overrun [ 1179.458094][ T5830] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1179.474355][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.500495][ T5830] usb 6-1: config 0 descriptor?? [ 1179.527829][ T5830] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1179.870132][T31589] loop4: detected capacity change from 0 to 256 [ 1179.912921][T31589] FAT-fs (loop4): Directory bread(block 64) failed [ 1179.925745][T31589] FAT-fs (loop4): Directory bread(block 65) failed [ 1179.946227][ T5830] gspca_cpia1: usb_control_msg 03, error -71 [ 1179.961153][ T5830] gspca_cpia1: usb_control_msg 01, error -71 [ 1179.964245][T31589] FAT-fs (loop4): Directory bread(block 66) failed [ 1179.976228][ T5830] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1179.993732][T31559] loop0: detected capacity change from 0 to 32768 [ 1179.994428][T31589] FAT-fs (loop4): Directory bread(block 67) failed [ 1180.010315][ T5830] usb 6-1: USB disconnect, device number 12 [ 1180.047741][T31589] FAT-fs (loop4): Directory bread(block 68) failed [ 1180.079019][T31559] ea_get: invalid extended attribute [ 1180.100590][T31589] FAT-fs (loop4): Directory bread(block 69) failed [ 1180.114718][T31589] FAT-fs (loop4): Directory bread(block 70) failed [ 1180.131944][T31589] FAT-fs (loop4): Directory bread(block 71) failed [ 1180.152278][T31589] FAT-fs (loop4): Directory bread(block 72) failed [ 1180.161774][T31589] FAT-fs (loop4): Directory bread(block 73) failed [ 1180.895432][T31623] loop5: detected capacity change from 0 to 4096 [ 1180.994600][T31637] SET target dimension over the limit! [ 1181.277868][T31608] loop0: detected capacity change from 0 to 32768 [ 1181.383097][T31608] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1181.411964][T31660] loop4: detected capacity change from 0 to 1024 [ 1181.544485][T31660] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1181.552159][T31660] syz.4.14882: attempt to access beyond end of device [ 1181.552159][T31660] loop4: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1181.569557][T31608] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280 [ 1181.613553][T31660] Buffer I/O error on dev loop4, logical block 458752, async page read [ 1181.628679][T31608] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1181.642650][T31660] syz.4.14882: attempt to access beyond end of device [ 1181.642650][T31660] loop4: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1181.664497][T31608] OCFS2: File system is now read-only. [ 1181.683660][T31660] Buffer I/O error on dev loop4, logical block 458752, async page read [ 1181.701252][T31608] (syz.0.14868,31608,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 1181.740968][T31608] (syz.0.14868,31608,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1181.771350][T31608] (syz.0.14868,31608,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 1181.790323][T31608] (syz.0.14868,31608,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1181.823856][T31608] (syz.0.14868,31608,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 1181.845293][T31608] (syz.0.14868,31608,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 1181.853593][T31608] (syz.0.14868,31608,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1181.883145][T31608] (syz.0.14868,31608,1):ocfs2_mknod:385 ERROR: status = -30 [ 1181.906014][T31608] (syz.0.14868,31608,1):ocfs2_mknod:502 ERROR: status = -30 [ 1181.913360][T31608] (syz.0.14868,31608,1):ocfs2_create:676 ERROR: status = -30 [ 1181.915128][T31667] loop2: detected capacity change from 0 to 4096 [ 1181.962551][T31667] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1182.108604][T14106] ocfs2: Unmounting device (7,0) on (node local) [ 1182.322760][T31651] loop5: detected capacity change from 0 to 32768 [ 1182.407393][T31651] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1182.591020][T31651] XFS (loop5): Ending clean mount [ 1182.776192][T31707] binder: 31706:31707 ioctl c0046209 100000000000000 returned -22 [ 1182.794604][T26136] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1183.446709][ T5085] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 1183.626991][T31700] loop2: detected capacity change from 0 to 32768 [ 1183.763210][T31700] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1184.056852][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 1184.264191][T31753] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14903'. [ 1184.793851][T31768] loop0: detected capacity change from 0 to 8192 [ 1184.843494][T31739] loop4: detected capacity change from 0 to 32768 [ 1184.850382][T31768] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1184.863625][T31768] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1184.874149][T31768] REISERFS (device loop0): using journaled data mode [ 1184.880975][T31768] reiserfs: using flush barriers [ 1184.905325][T31768] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1184.922974][T31768] REISERFS (device loop0): checking transaction log (loop0) [ 1184.945947][T31768] REISERFS (device loop0): Using r5 hash to sort names [ 1184.953202][T31768] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1184.985058][T31739] read_mapping_page failed! [ 1184.989610][T31739] diRead: read_metapage failed [ 1185.024022][T31739] jfs_lookup: iget failed on inum 32 [ 1185.035230][T31768] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1186.623663][T31867] loop0: detected capacity change from 0 to 4096 [ 1186.649159][T31876] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1186.685253][T31876] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1186.756387][T31882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14943'. [ 1186.767379][T31867] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1186.828285][T31867] ntfs3: loop0: Failed to load $Extend (-22). [ 1186.847782][T31867] ntfs3: loop0: Failed to initialize $Extend. [ 1187.311473][T31910] xt_cgroup: invalid path, errno=-2 [ 1187.783097][T31932] loop5: detected capacity change from 0 to 1024 [ 1187.784793][T31929] cgroup: Invalid name [ 1187.883379][T31932] hfsplus: cannot replace xattr [ 1188.003133][T31896] loop4: detected capacity change from 0 to 40427 [ 1188.038093][T31896] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1188.068756][T31896] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1188.133598][T31896] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1188.303138][T31896] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1188.316655][T31896] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1188.434996][T31896] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 1188.524565][T31972] netlink: 'syz.5.14969': attribute type 30 has an invalid length. [ 1189.138222][T32036] loop0: detected capacity change from 0 to 764 [ 1189.204871][T32036] rock: directory entry would overflow storage [ 1189.211069][T32036] rock: sig=0x4654, size=5, remaining=4 [ 1189.319056][T32036] isofs: Unable to find the ".." directory for NFS. [ 1189.324549][T32045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14980'. [ 1190.129764][T32087] loop5: detected capacity change from 0 to 16 [ 1190.162867][T32087] erofs: (device loop5): mounted with root inode @ nid 36. [ 1190.585290][T32072] loop2: detected capacity change from 0 to 32768 [ 1190.902700][T32114] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15001'. [ 1190.921028][T32114] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1190.932273][T32114] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1191.101467][T32124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15003'. [ 1191.254397][ T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1191.401701][ T28] audit: type=1326 audit(2000000022.169:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32140 comm="syz.2.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c629 code=0x7ffc0000 [ 1191.435010][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 1191.443967][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.469328][ T28] audit: type=1326 audit(2000000022.169:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32140 comm="syz.2.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c629 code=0x7ffc0000 [ 1191.494706][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1191.553510][ T28] audit: type=1326 audit(2000000022.179:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32140 comm="syz.2.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c629 code=0x7ffc0000 [ 1191.558758][ T8] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1191.625066][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.650825][ T8] usb 6-1: Product: syz [ 1191.653502][ T28] audit: type=1326 audit(2000000022.179:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32140 comm="syz.2.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f33c3f9c629 code=0x7ffc0000 [ 1191.662450][ T8] usb 6-1: Manufacturer: syz [ 1191.678361][ T28] audit: type=1326 audit(2000000022.179:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32140 comm="syz.2.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c629 code=0x7ffc0000 [ 1191.705695][ T28] audit: type=1326 audit(2000000022.179:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32140 comm="syz.2.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c629 code=0x7ffc0000 [ 1191.728220][ T8] usb 6-1: SerialNumber: syz [ 1191.745205][ T28] audit: type=1326 audit(2000000022.179:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32140 comm="syz.2.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c3f9c629 code=0x7ffc0000 [ 1191.782323][ T28] audit: type=1326 audit(2000000022.179:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32140 comm="syz.2.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f33c3f9c629 code=0x7ffc0000 [ 1191.833382][ T28] audit: type=1326 audit(2000000022.179:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32140 comm="syz.2.15008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f33c3f9c629 code=0x7ffc0000 [ 1191.915455][T32159] netlink: set zone limit has 8 unknown bytes [ 1191.972351][ T8] usb 6-1: 0:2 : does not exist [ 1191.977468][ T8] usb 6-1: unit 9 not found! [ 1192.000453][ T8] usb 6-1: 4:0: cannot get min/max values for control 3 (id 4) [ 1192.035479][ T8] usb 6-1: 4:0: cannot get min/max values for control 9 (id 4) [ 1192.086735][ T8] usb 6-1: USB disconnect, device number 13 [ 1192.110873][T32175] 9pnet_fd: Insufficient options for proto=fd [ 1192.139619][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1192.305631][T32189] loop2: detected capacity change from 0 to 8 [ 1192.366715][T32189] SQUASHFS error: Unable to read inode 0xe3 [ 1192.500841][T32143] loop4: detected capacity change from 0 to 32768 [ 1193.258129][T32240] xt_recent: hitcount (4294967293) is larger than allowed maximum (255) [ 1193.346559][T32249] loop2: detected capacity change from 0 to 16 [ 1193.384836][T32249] erofs: (device loop2): mounted with root inode @ nid 36. [ 1193.447016][T32249] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 32811 of nid 36 [ 1193.807726][T32277] loop4: detected capacity change from 0 to 256 [ 1193.814341][T32275] netlink: 800 bytes leftover after parsing attributes in process `syz.2.15042'. [ 1193.825885][T32275] netlink: 1301 bytes leftover after parsing attributes in process `syz.2.15042'. [ 1193.907539][T32277] FAT-fs (loop4): Directory bread(block 64) failed [ 1193.930877][T32277] FAT-fs (loop4): Directory bread(block 65) failed [ 1193.974603][T32277] FAT-fs (loop4): Directory bread(block 66) failed [ 1193.994420][T32277] FAT-fs (loop4): Directory bread(block 67) failed [ 1194.001089][T32277] FAT-fs (loop4): Directory bread(block 68) failed [ 1194.064410][T32277] FAT-fs (loop4): Directory bread(block 69) failed [ 1194.071122][T32277] FAT-fs (loop4): Directory bread(block 70) failed [ 1194.101671][T32277] FAT-fs (loop4): Directory bread(block 71) failed [ 1194.123408][T32277] FAT-fs (loop4): Directory bread(block 72) failed [ 1194.156324][T32277] FAT-fs (loop4): Directory bread(block 73) failed [ 1194.204510][T32293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15046'. [ 1194.469351][T32309] loop2: detected capacity change from 0 to 256 [ 1194.563651][T32309] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 1194.965194][ T2349] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1195.169843][T32348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15062'. [ 1195.179190][ T2349] usb 5-1: Using ep0 maxpacket: 32 [ 1195.191322][ T2349] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 1195.212013][ T2349] usb 5-1: config 0 has no interface number 0 [ 1195.243806][ T2349] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 1195.266867][T32350] loop0: detected capacity change from 0 to 8 [ 1195.281367][T32350] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1195.284568][ T2349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.310532][T32350] SQUASHFS error: Failed to read block 0x9b: -5 [ 1195.334328][ T2349] usb 5-1: Product: syz [ 1195.343155][T32350] SQUASHFS error: Unable to read metadata cache entry [99] [ 1195.354464][ T2349] usb 5-1: Manufacturer: syz [ 1195.371425][T32350] SQUASHFS error: Unable to read inode 0x127 [ 1195.374323][ T2349] usb 5-1: SerialNumber: syz [ 1195.403133][ T2349] usb 5-1: config 0 descriptor?? [ 1195.435735][ T2349] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1195.836829][ T2349] gspca_sn9c2028: read1 error -71 [ 1195.849927][ T2349] gspca_sn9c2028: read1 error -71 [ 1195.856782][ T2349] sn9c2028: probe of 5-1:0.119 failed with error -71 [ 1195.869351][ T2349] usb 5-1: USB disconnect, device number 44 [ 1195.880136][T32382] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15070'. [ 1196.375480][T32414] loop5: detected capacity change from 0 to 512 [ 1196.414921][T32414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 1196.432559][T32414] System zones: 1-12 [ 1196.438786][T32414] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.15079: error while reading EA inode 32 err=-116 [ 1196.508670][T32414] EXT4-fs (loop5): Remounting filesystem read-only [ 1196.538106][T32414] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1196.620349][T32414] EXT4-fs warning (device loop5): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 1196.642544][T32414] EXT4-fs (loop5): 1 orphan inode deleted [ 1196.653219][T32414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1196.796870][T26136] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.002338][T32452] netlink: 'syz.5.15087': attribute type 1 has an invalid length. [ 1197.019265][T32452] netlink: 'syz.5.15087': attribute type 3 has an invalid length. [ 1197.031333][T32452] netlink: 224 bytes leftover after parsing attributes in process `syz.5.15087'. [ 1197.709585][T32492] loop5: detected capacity change from 0 to 256 [ 1197.733721][T32492] exfat: Deprecated parameter 'namecase' [ 1197.774485][T32492] exfat: Deprecated parameter 'utf8' [ 1197.815573][T32492] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1198.165542][T32511] overlayfs: conflicting options: metacopy=off,verity=on [ 1198.555145][T32532] netlink: 460 bytes leftover after parsing attributes in process `syz.4.15112'. [ 1198.701766][T32539] loop5: detected capacity change from 0 to 64 [ 1198.838414][T32546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15118'. [ 1198.864420][T32546] netlink: 31 bytes leftover after parsing attributes in process `syz.0.15118'. [ 1198.875996][T32546] netlink: 'syz.0.15118': attribute type 3 has an invalid length. [ 1198.918843][T32546] netlink: 'syz.0.15118': attribute type 2 has an invalid length. [ 1198.953023][T32546] netlink: 31 bytes leftover after parsing attributes in process `syz.0.15118'. [ 1199.035236][T32520] loop2: detected capacity change from 0 to 32768 [ 1199.077490][T32520] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.15110 (32520) [ 1199.103940][T32557] netlink: 'syz.0.15121': attribute type 3 has an invalid length. [ 1199.137917][T32520] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1199.198086][T32520] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1199.244578][T32520] BTRFS info (device loop2): force clearing of disk cache [ 1199.251770][T32520] BTRFS info (device loop2): enabling auto defrag [ 1199.299549][T32520] BTRFS info (device loop2): max_inline at 0 [ 1199.319430][T32520] BTRFS info (device loop2): enabling disk space caching [ 1199.334580][T32520] BTRFS info (device loop2): disk space caching is enabled [ 1199.358805][T32573] loop0: detected capacity change from 0 to 256 [ 1199.382454][T32569] loop4: detected capacity change from 0 to 2048 [ 1199.518694][T32569] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1199.541944][T32520] BTRFS info (device loop2): enabling ssd optimizations [ 1199.583015][T32520] BTRFS info (device loop2): rebuilding free space tree [ 1199.677031][T32520] BTRFS info (device loop2): disabling free space tree [ 1199.684025][T32520] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1199.753221][T32520] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1200.108404][T32617] loop5: detected capacity change from 0 to 64 [ 1200.174473][T32617] hfs: unable to locate alternate MDB [ 1200.180214][T32617] hfs: continuing without an alternate MDB [ 1200.204026][T32617] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1200.215391][ T5772] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1200.233128][T32622] loop4: detected capacity change from 0 to 1764 [ 1201.444264][T32680] loop5: detected capacity change from 0 to 8 [ 1201.484869][T32680] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1201.504500][T32680] SQUASHFS error: Failed to read block 0x9b: -5 [ 1201.510795][T32680] SQUASHFS error: Unable to read metadata cache entry [99] [ 1201.529906][T32680] SQUASHFS error: Unable to read inode 0x127 [ 1202.277438][T32725] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15163'. [ 1202.553243][T32739] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15168'. [ 1202.939660][T32756] bond2: entered promiscuous mode [ 1202.955089][ T320] loop0: detected capacity change from 0 to 4096 [ 1202.956396][T32756] bond2: entered allmulticast mode [ 1202.984935][ T320] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1203.005041][ T320] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1203.019858][T32756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1203.028183][ T320] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1203.046932][ T320] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1203.070429][ T320] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1203.114192][ T320] ntfs: volume version 3.1. [ 1203.155848][ T320] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1203.211406][ T320] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1203.270394][ T320] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1203.312106][ T320] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1203.340026][ T320] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1203.557130][ T340] loop5: detected capacity change from 0 to 1024 [ 1203.686464][ T340] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1203.701609][T32748] loop2: detected capacity change from 0 to 32768 [ 1203.840563][T32748] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 1203.840563][T32748] [ 1204.285125][ T380] loop0: detected capacity change from 0 to 2048 [ 1204.434662][ T380] loop0: p2 p3 p7 [ 1204.612192][ T389] loop4: detected capacity change from 0 to 4096 [ 1204.640855][ T389] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1204.668613][ T5862] udevd[5862]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 1204.684671][ T7093] udevd[7093]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 1204.707678][ T5756] udevd[5756]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 1204.803180][ T389] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1205.199490][ T420] loop0: detected capacity change from 0 to 4096 [ 1205.263001][ T420] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1205.373457][ T440] loop4: detected capacity change from 0 to 256 [ 1205.405898][ T420] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1205.442759][ T420] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 1205.475687][ T440] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 1205.874381][ T5830] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1206.090335][ T5830] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1206.116315][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.146898][ T5830] usb 6-1: config 0 descriptor?? [ 1206.159636][ T5830] cp210x 6-1:0.0: cp210x converter detected [ 1206.586669][ T5830] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1206.618433][ T5830] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 1206.645003][ T5830] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1206.668628][ T5830] usb 6-1: USB disconnect, device number 14 [ 1206.707245][ T5830] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1206.725508][ T5830] cp210x 6-1:0.0: device disconnected [ 1206.788045][ T533] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15226'. [ 1206.923265][ T539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1206.930663][ T539] IPv6: NLM_F_CREATE should be set when creating new route [ 1206.938008][ T539] IPv6: NLM_F_CREATE should be set when creating new route [ 1206.987508][ T542] kernel profiling enabled (shift: 19) [ 1207.624872][ T582] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15242'. [ 1207.633990][ T582] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15242'. [ 1207.774929][ T590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15244'. [ 1207.990754][ T604] IPv6: sit1: Disabled Multicast RS [ 1208.122672][ T612] overlayfs: conflicting options: userxattr,metacopy=on [ 1208.335539][ T621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15253'. [ 1208.340079][ T625] overlayfs: conflicting options: nfs_export=on,index=off [ 1208.481631][ T631] loop5: detected capacity change from 0 to 8 [ 1208.499081][ T631] SQUASHFS error: Failed to read block 0x738: -5 [ 1208.507406][ T631] SQUASHFS error: Unable to read metadata cache entry [736] [ 1208.817600][ T602] loop0: detected capacity change from 0 to 32768 [ 1208.845136][ T602] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.15248 (602) [ 1208.943404][ T602] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1208.972391][ T602] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1209.021353][ T602] BTRFS info (device loop0): force clearing of disk cache [ 1209.043605][ T602] BTRFS info (device loop0): enabling auto defrag [ 1209.079148][ T602] BTRFS info (device loop0): max_inline at 0 [ 1209.103470][ T602] BTRFS info (device loop0): enabling disk space caching [ 1209.124658][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1209.124672][ T28] audit: type=1326 audit(2000000039.879:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=661 comm="syz.4.15265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cf99c629 code=0x7ffc0000 [ 1209.156603][ T602] BTRFS info (device loop0): disk space caching is enabled [ 1209.189194][ T28] audit: type=1326 audit(2000000039.879:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=661 comm="syz.4.15265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cf99c629 code=0x7ffc0000 [ 1209.300062][ T680] netlink: 44 bytes leftover after parsing attributes in process `syz.5.15269'. [ 1209.322336][ T677] loop2: detected capacity change from 0 to 256 [ 1209.333552][ T28] audit: type=1326 audit(2000000039.919:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=661 comm="syz.4.15265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cf99c629 code=0x7ffc0000 [ 1209.356922][ T28] audit: type=1326 audit(2000000039.919:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=661 comm="syz.4.15265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cf99c629 code=0x7ffc0000 [ 1209.380681][ T28] audit: type=1326 audit(2000000039.949:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=661 comm="syz.4.15265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f87cf99c629 code=0x7ffc0000 [ 1209.439127][ T677] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 1209.463837][ T28] audit: type=1326 audit(2000000039.949:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=661 comm="syz.4.15265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cf99c629 code=0x7ffc0000 [ 1209.489035][ T28] audit: type=1326 audit(2000000039.949:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=661 comm="syz.4.15265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cf99c629 code=0x7ffc0000 [ 1209.512855][ T602] BTRFS info (device loop0): enabling ssd optimizations [ 1209.537742][ T602] BTRFS info (device loop0): rebuilding free space tree [ 1209.569921][ T28] audit: type=1326 audit(2000000039.949:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=661 comm="syz.4.15265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f87cf99c629 code=0x7ffc0000 [ 1209.614666][ T602] BTRFS info (device loop0): disabling free space tree [ 1209.624572][ T602] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1209.677297][ T28] audit: type=1326 audit(2000000039.949:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=661 comm="syz.4.15265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f87cf99c629 code=0x7ffc0000 [ 1209.699560][ C0] vkms_vblank_simulate: vblank timer overrun [ 1209.706209][ T602] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1209.759844][ T704] cgroup: name respecified [ 1209.771616][ T28] audit: type=1326 audit(2000000040.539:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=706 comm="syz.5.15274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78b9c629 code=0x7ffc0000 [ 1210.006094][ T717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15276'. [ 1210.125586][T14106] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1210.343164][ T618] Bluetooth: hci4: command 0x0406 tx timeout [ 1210.585346][ T747] IPv6: sit1: Disabled Multicast RS [ 1210.677941][ T752] loop2: detected capacity change from 0 to 2048 [ 1210.755383][ T752] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1210.896041][ T752] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 1211.164739][ T772] netlink: 'syz.0.15292': attribute type 21 has an invalid length. [ 1211.172689][ T772] netlink: 164 bytes leftover after parsing attributes in process `syz.0.15292'. [ 1211.663921][ T760] loop5: detected capacity change from 0 to 32768 [ 1211.709078][ T760] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.15288 (760) [ 1211.810680][ T760] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1211.833432][ T760] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1211.862460][ T808] netlink: 'syz.2.15302': attribute type 10 has an invalid length. [ 1211.894387][ T760] BTRFS info (device loop5): force clearing of disk cache [ 1211.901564][ T760] BTRFS info (device loop5): enabling auto defrag [ 1211.951790][ T760] BTRFS info (device loop5): max_inline at 0 [ 1211.974349][ T760] BTRFS info (device loop5): enabling disk space caching [ 1211.981427][ T760] BTRFS info (device loop5): disk space caching is enabled [ 1212.094737][ T29] INFO: task syz-executor:5766 blocked for more than 143 seconds. [ 1212.102598][ T29] Not tainted syzkaller #0 [ 1212.114352][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1212.123064][ T29] task:syz-executor state:D stack:21552 pid:5766 ppid:1 flags:0x00004004 [ 1212.193164][ T29] Call Trace: [ 1212.213542][ T29] [ 1212.221126][ T760] BTRFS info (device loop5): enabling ssd optimizations [ 1212.231456][ T832] loop4: detected capacity change from 0 to 2048 [ 1212.237379][ T29] __schedule+0x1553/0x45a0 [ 1212.242663][ T29] ? asan.module_dtor+0x20/0x20 [ 1212.246511][ T760] BTRFS info (device loop5): rebuilding free space tree [ 1212.262188][ T29] ? mark_lock+0x94/0x320 [ 1212.266933][ T29] ? lock_chain_count+0x20/0x20 [ 1212.271913][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1212.277242][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1212.282908][ T29] schedule+0xbd/0x170 [ 1212.287353][ T29] io_schedule+0x80/0xd0 [ 1212.291706][ T29] folio_wait_bit_common+0x714/0xfa0 [ 1212.297198][ T29] ? folio_wait_bit+0x30/0x30 [ 1212.302075][ T29] ? filemap_get_entry+0x379/0x3f0 [ 1212.307402][ T29] ? _compound_head+0x120/0x120 [ 1212.313325][ T29] ? find_lock_entries+0xc3e/0xfe0 [ 1212.318740][ T29] __filemap_get_folio+0xbc/0xbb0 [ 1212.323920][ T29] truncate_inode_pages_range+0x46b/0xfb0 [ 1212.329905][ T29] ? mapping_evict_folio+0x510/0x510 [ 1212.335456][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1212.340970][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1212.364130][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1212.368617][ T760] BTRFS info (device loop5): disabling free space tree [ 1212.387973][ T29] evict+0x4dd/0x8d0 [ 1212.392012][ T29] ? proc_nr_inodes+0x230/0x230 [ 1212.406912][ T760] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1212.410599][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1212.422760][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1212.428533][ T29] evict_inodes+0x606/0x6a0 [ 1212.433196][ T29] ? clear_inode+0x150/0x150 [ 1212.433248][ T832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1212.438277][ T29] generic_shutdown_super+0x97/0x2b0 [ 1212.455446][ T29] kill_block_super+0x44/0x90 [ 1212.460139][ T29] deactivate_locked_super+0x97/0x100 [ 1212.465962][ T29] cleanup_mnt+0x43b/0x4d0 [ 1212.468151][ T760] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1212.470392][ T29] task_work_run+0x1d4/0x260 [ 1212.485234][ T29] ? task_work_cancel+0x220/0x220 [ 1212.490287][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 1212.496360][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 1212.501677][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 1212.507295][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 1212.512790][ T29] do_syscall_64+0x61/0xa0 [ 1212.517312][ T29] ? clear_bhb_loop+0x40/0x90 [ 1212.522015][ T29] ? clear_bhb_loop+0x40/0x90 [ 1212.526943][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1212.532867][ T29] RIP: 0033:0x7f4cc719d897 [ 1212.537385][ T29] RSP: 002b:00007ffeba3598b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1212.545973][ T29] RAX: 0000000000000000 RBX: 00007f4cc7231ef0 RCX: 00007f4cc719d897 [ 1212.553968][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeba359970 [ 1212.563633][ T29] RBP: 00007ffeba359970 R08: 00007ffeba35a970 R09: 00000000ffffffff [ 1212.571736][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeba35aa00 [ 1212.580080][ T29] R13: 00007f4cc7231ef0 R14: 0000000000104caa R15: 00007ffeba35aa40 [ 1212.593327][ T832] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #12: block 2: comm syz.4.15306: lblock 0 mapped to illegal pblock 2 (length 1) [ 1212.604380][ T29] [ 1212.610583][ T29] [ 1212.610583][ T29] Showing all locks held in the system: [ 1212.626136][ T29] 1 lock held by khungtaskd/29: [ 1212.631021][ T29] #0: ffffffff8d131fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1212.674458][ T29] 3 locks held by kworker/u4:6/1135: [ 1212.679787][ T29] #0: ffff8880b8f3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1212.704461][ T29] #1: ffffc9000469fd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1212.741782][ T29] #2: ffff8880b8f3c018 (&rq->__lock){-.-.}-{2:2}, at: loop_process_work+0x191c/0x1f50 [ 1212.763565][ T29] 2 locks held by getty/5526: [ 1212.768565][ T29] #0: ffff888030fe20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1212.787540][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1212.803226][ T29] 1 lock held by udevd/5756: [ 1212.812600][ T29] 1 lock held by syz-executor/5766: [ 1212.823179][ T29] #0: ffff88805b9080e0 (&type->s_umount_key#78){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 1212.844081][ T29] 1 lock held by syz-executor/29341: [ 1212.849499][ T29] #0: ffffffff8d137978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 1212.869140][ T29] 1 lock held by syz-executor/26136: [ 1212.877709][ T29] #0: ffffffff8d137978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 1212.901973][T29341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.914177][ T29] [ 1212.918455][ T29] ============================================= [ 1212.918455][ T29] [ 1212.943385][ T29] NMI backtrace for cpu 0 [ 1212.947754][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1212.954961][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1212.965039][ T29] Call Trace: [ 1212.965360][T26136] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1212.968309][ T29] [ 1212.968317][ T29] dump_stack_lvl+0x18c/0x250 [ 1212.986081][ T29] ? preempt_count_add+0x91/0x1a0 [ 1212.991136][ T29] ? show_regs_print_info+0x20/0x20 [ 1212.996355][ T29] ? load_image+0x400/0x400 [ 1213.000889][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1213.005848][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1213.012026][ T29] ? _printk+0xde/0x130 [ 1213.016201][ T29] ? load_image+0x400/0x400 [ 1213.020741][ T29] ? load_image+0x400/0x400 [ 1213.025268][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1213.031358][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1213.037366][ T29] watchdog+0xf3d/0xf80 [ 1213.041544][ T29] ? watchdog+0x1e1/0xf80 [ 1213.045898][ T29] kthread+0x2fa/0x390 [ 1213.049980][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1213.055026][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1213.059636][ T29] ret_from_fork+0x48/0x80 [ 1213.064072][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1213.068682][ T29] ret_from_fork_asm+0x11/0x20 [ 1213.073471][ T29] [ 1213.077276][ T29] Sending NMI from CPU 0 to CPUs 1: [ 1213.082564][ C1] NMI backtrace for cpu 1 [ 1213.082574][ C1] CPU: 1 PID: 5756 Comm: udevd Not tainted syzkaller #0 [ 1213.082588][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1213.082596][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 1213.082619][ C1] Code: a0 a0 7c 7e 65 8b 15 a1 a0 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 1213.082631][ C1] RSP: 0018:ffffc9000468fc30 EFLAGS: 00000246 [ 1213.082645][ C1] RAX: ffffffff83eb0546 RBX: ffff888019a7d1a8 RCX: ffff888022503c00 [ 1213.082656][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888019a7d1a8 [ 1213.082666][ C1] RBP: dffffc0000000000 R08: ffffffff8e8adeaf R09: 1ffffffff1d15bd5 [ 1213.082676][ C1] R10: dffffc0000000000 R11: fffffbfff1d15bd6 R12: dffffc0000000000 [ 1213.082687][ C1] R13: ffff888019a7d1a8 R14: ffff8880308804e8 R15: ffff88802a928e80 [ 1213.082698][ C1] FS: 00007fc643e8c880(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1213.082712][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1213.082722][ C1] CR2: 0000555c6d8470c0 CR3: 000000007bf44000 CR4: 00000000003506e0 [ 1213.082735][ C1] Call Trace: [ 1213.082741][ C1] [ 1213.082745][ C1] end_current_label_crit_section+0x76/0x170 [ 1213.082768][ C1] common_perm+0x182/0x1e0 [ 1213.082788][ C1] apparmor_path_unlink+0x258/0x300 [ 1213.082804][ C1] ? __d_lookup+0x8f/0x7c0 [ 1213.082819][ C1] ? apparmor_path_link+0x130/0x130 [ 1213.082834][ C1] ? tomoyo_path_unlink+0xab/0xf0 [ 1213.082850][ C1] ? tomoyo_path_truncate+0x20/0x20 [ 1213.082869][ C1] security_path_unlink+0xdc/0x130 [ 1213.082891][ C1] do_unlinkat+0x2b3/0x590 [ 1213.082909][ C1] ? fsnotify_link_count+0xf0/0xf0 [ 1213.082926][ C1] ? getname_flags+0x20a/0x500 [ 1213.082949][ C1] __x64_sys_unlink+0x49/0x50 [ 1213.082962][ C1] do_syscall_64+0x55/0xa0 [ 1213.082982][ C1] ? clear_bhb_loop+0x40/0x90 [ 1213.082998][ C1] ? clear_bhb_loop+0x40/0x90 [ 1213.083014][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1213.083029][ C1] RIP: 0033:0x7fc643715937 [ 1213.083041][ C1] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 1213.083052][ C1] RSP: 002b:00007ffc4d02bb48 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1213.083066][ C1] RAX: ffffffffffffffda RBX: 00007ffc4d02bb70 RCX: 00007fc643715937 [ 1213.083076][ C1] RDX: 0000000000000000 RSI: 00000000000007ca RDI: 00007ffc4d02c770 [ 1213.083085][ C1] RBP: 0000555c79f38930 R08: 0000555c79f454a0 R09: 0000000000000000 [ 1213.083095][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000555c79f55bf0 [ 1213.083104][ C1] R13: 00007ffc4d02c770 R14: 0000000000000000 R15: 00007ffc4d02bf70 [ 1213.083146][ C1] [ 1213.388106][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1213.394988][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1213.402175][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1213.412215][ T29] Call Trace: [ 1213.415481][ T29] [ 1213.418399][ T29] dump_stack_lvl+0x18c/0x250 [ 1213.423075][ T29] ? show_regs_print_info+0x20/0x20 [ 1213.428263][ T29] ? load_image+0x400/0x400 [ 1213.432760][ T29] panic+0x2dc/0x730 [ 1213.436642][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1213.442265][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1213.446761][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1213.452909][ T29] watchdog+0xf7c/0xf80 [ 1213.457055][ T29] ? watchdog+0x1e1/0xf80 [ 1213.461378][ T29] kthread+0x2fa/0x390 [ 1213.465435][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1213.470447][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1213.475020][ T29] ret_from_fork+0x48/0x80 [ 1213.479439][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1213.484029][ T29] ret_from_fork_asm+0x11/0x20 [ 1213.488797][ T29] [ 1213.492121][ T29] Kernel Offset: disabled [ 1213.496433][ T29] Rebooting in 86400 seconds..